The UN agency had an unprotected database containing more than 115 thousand files

A division of the United Nations (UN) left a number of files containing sensitive data unprotected on servers. There were these in total 228GB input More than 115 thousand files information of high importance to which any interested visitor is exposed without protection by password or other means.

The vulnerability was in the database United Nations Endowment Fund to End Violence Against WomenA trust fund that helps organizations and projects combating violence against women.

The files contained data on partner organizations funded, personal employee information, and even tax matters related to the organizations.

The person who detected the breach was cybersecurity expert Jeremiah Fowler, who notified the UN ahead of any disclosure.

UN solved the problem but was scolded

existence already corrected the gap and thanked the researcher for his help. The UN did not elaborate on whether any unauthorized access to the server had occurred, but said it had contacted potentially affected individuals to explain the situation.

However, the person responsible for the discovery at the same time “pulled his ear” to the entityIt is an institution that should be more responsible in the field of cyber security.

According to him, This case is particularly sensitive as it involves people in particularly vulnerable situations and along with the leak, they may also become victims of other crimes. The fund works with organizations spread across all continents, including helping minors.

“If this data falls into the wrong hands or ends up on the dark web, fraud or an authoritarian government that knows which organizations are aligned where and with whomto attack them and even find out the names of people they helped,” Fowler explains.