Back to overview
wfp.org
Signal preview
Confidence MediumJun 5, 2026wfp.org

UN World Food Programme Discloses Breach Affecting 600,000 Gaza Households

PatternExternal actor · Hacking · Confidentiality impact

The United Nations' World Food Programme (WFP) revealed a data breach of its self-registration application (SRA) for Palestine. The incident exposed sensitive information for approximately 600,000 Gaza households, including names, ID numbers, phone numbers, and location information.

Signal date
Jun 5, 2026
Updated
Jun 25, 2026
Confidence
Medium
Sources
5 sources

Signal context

First seen: Jun 5, 2026

Last updated: Jun 25, 2026

Status: Public signal

Key points

  • 600,000 Gaza households affected.
  • Breach of the self-registration application (SRA) for Palestine.
  • Exposed data includes names, ID numbers, phone numbers, and location information.

Signal analysis

Beta

It helps compare this signal with other published signals without treating the labels as final determinations.

Affected organization
Wfp logo
Wfp

Likely country: Location not provided

Threat source
Hacking activity

Watch internet-facing systems, credential abuse and exploit activity.

  • Source type: outside the affected organization
Business impact
Potential data exposure

Impact area: Confidentiality

Likely asset: User or customer data

Trend context
74 signals with similar action pattern
  • 1 signal in the same sector
  • 93 signals with the same likely impact area
  • 1 signal linked to this organization/domain
Mentioned entities
WfpData DisclosureUN World Food Programme DisclosesGaza Households The United NationsWorld Food ProgrammeWFPSRAPalestine. TheGazaPalestine. Exposed

External sources

Related signals

Grouped by why the signal is relevant.

agelessrx.com logoAgelessrxJun 25, 2026
Same action patternSame impact area

AgelessRx Data Breach Exposes Patient Health Information

AgelessRx, a telehealth platform specializing in longevity and anti-aging treatments, disclosed a data breach. An unauthorized actor gained access to certain help-desk tickets within the company's system between April 17 and April 22, 2026. The breach exposed sensitive patient health information, including names, dates of birth, health diagnoses or conditions, medications, and prescription details. The incident was reported to attorneys general on June 24, 2026, and notification letters to affected individuals began on June 23, 2026.

onetrust.com logoOnetrustJun 24, 2026
Same action patternSame impact area

OneTrust Customer Data Exposed in Klue Supply Chain Attack

OneTrust, a privacy, security, and governance technology company, was among the organizations affected by the Klue supply chain attack. The incident involved unauthorized access to customer data within Salesforce environments, due to compromised OAuth tokens from the Klue platform.

hackerone.com logoHackeroneJun 24, 2026
Same action patternSame impact area

HackerOne Affected by Klue Supply Chain Attack

Cybersecurity firm HackerOne was among the organizations impacted by the Klue supply chain attack, which involved unauthorized access to customer data within Salesforce environments. The attack leveraged compromised OAuth tokens from the Klue platform.

klue.com logoKlueJun 24, 2026
Same action patternSame impact area

Klue Data Breach Leads to Salesforce Customer Data Exposure

Market intelligence platform Klue experienced a data breach, uncovered on June 12, 2026, where attackers stole OAuth tokens used to access customer data from Salesforce. The Icarus group claimed responsibility, leaking business contacts, sales notes, and pricing details from multiple victims. The incident was widely reported on June 24, 2026.

snyk.io logoSnykJun 24, 2026
Same action patternSame impact area

Snyk Affected by Klue Supply Chain Data Breach

Developer security platform Snyk was impacted by the Klue supply chain attack, which led to unauthorized access to customer data within Salesforce environments. The attack leveraged compromised OAuth tokens from the Klue platform.

jamf.com logoJamfJun 24, 2026
Same action patternSame impact area

Jamf Customer Data Exposed in Klue Supply Chain Attack

Jamf, a provider of Apple device management solutions, was impacted by the Klue supply chain attack. The incident involved unauthorized access to customer data stored in Salesforce instances, stemming from compromised OAuth tokens from the Klue platform. The Icarus extortion group claimed responsibility for the attack.