The International Civil Aviation Organization (ICAO), the United Nations agency that defines international operational standards for civil aviation, confirmed it was investigating the cybersecurity incident.
In a statement issued on Monday, ICAO said it is “actively investigating reports of possible information security incidents allegedly linked to threat actors known to have targeted international organizations.” .
This follows a January 5 post on a popular hacking forum in which an individual claimed to have accessed 42,000 ICAO documents containing personal information.
A sample of the allegedly stolen data posted on the forum, seen by TechCrunch, included names, dates of birth, home and email addresses, phone numbers, and details about education and employment. Some of the records appear to contain information about ICAO personnel.
When contacted by TechCrunch, ICAO declined to comment beyond the statement.