The International Civil Aviation Organization (ICAO), part of the United Nations, has confirmed a data breach involving the theft of approximately 42,000 records from its recruitment database. The breach was first reported when a threat actor, using the handle “Natohub,” leaked an archive of these documents on the BreachForums hacking forum. The stolen records include personal information such as names, email addresses, dates of birth, and employment histories, but no financial details, passwords, or passport information. The breach, spanning recruitment application data from April 2016 to July 2024, is limited to ICAO’s recruitment systems and does not impact aviation safety or security operations. ICAO has stated that it is actively investigating the incident and has implemented additional security measures to prevent future attacks. Efforts are underway to assess the impact and notify affected individuals. The Natohub account, which leaked the ICAO data, had previously claimed access to the personal data of 14,000 UN delegates. This incident follows a history of cyberattacks on UN entities, including a 2019 breach of UN networks in Vienna and Geneva and a 2024 cyberattack on the United Nations Development Programme (UNDP) claimed by the 8Base ransomware gang. The United Nations Environmental Programme (UNEP) also experienced a data breach in 2021, exposing over 100,000 employee records.