DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

United Nations: usernames, passwords, and e-mail addresses leaked on the Internet (update2)

Posted on November 29, 2011 by Dissent

The hacker who self-identifies as “TriCk – TeaMp0isoN” has posted a statement on Pastebin about the United Nations with a leak of some of their data. The hack was announced on Twitter by @_TeaMp0isoN about 9 hours ago. A prefactory statement to the data dump says:

A Senate for Global Corruption, the United Nations sits to facilitate the introduction of a New World Order and a One World Government as outlined by Brock Chisolm the former Director of UNWHO when he said:

”To achieve a One World Government, it is necessary to remove from the minds of men their individualism, their loyalty to family traditions and national identification’

The overseer of many atrocities from Rwanda to Darfour to the inaction in Yugoslavia to the creation of the State of Israel and the disposition of the Palestinian people, the UN has become a beast that must be stopped or tamed!

How far you have come from the first address by Thomas Jefferson where ‘peace, commerce and honest friendship’ were the Modis Operandi to one today where talk of ‘eliminating 350,000 people a day’ as outlined by Jacques Cousteau is a academic consideration.

The UN is a fraud! The bureaucratic head of NATO used to legitimise the Barbarism of Capitalist elite!

Conor Cruise said ‘you can safely appeal to the UN in the comfortable certainty that it will let you down’ – never has a truer sentence been spoken……

United Nations, why didnt you expect us?

What followed is over 850 usernames, plain-text passwords, and e-mail addresses.  Many of the e-mail addresses are from undp.org, the United Nations Development Programme. It was reportedly UNDP’s database that was hacked. The database contains dozens of .gov e-mail addresses from a number of countries.

In a parting shot, the hacker(s) also taunt the U.N.:

// The question now is… how?… We will let the so called “secutiy experts” over at the UN figure that out. . . .
—— Have a Nice Day….-

Update: BBC got a statement from the U.N. Their coverage reads, in part:

A spokeswoman for the UNDP said the agency believed “an old server which contains old data” had been targeted.

“The UNDP found [the] compromised server and took it offline,” said Sausan Ghosheh.

“The server goes back to 2007. There are no active passwords listed for those accounts.

“Please note that UNDP.org was not compromised.”

Update 2: In response to the spokesperson’s claims that the data were on an old server, the hacker, TeaMp0isoN, today uploaded evidence of recent communications obtained from the server. He also notes:

apparently they shut the server down when they had found out it was hacked, yet i just obtained the above email from the cj_batch_messages table in their database server which was meant to be down?

[…]

– The Server is _STILL_ Active & We _STILL_ have access…

LET THE TRUTH BE KNOWN . . . .


Related:

  • Revealed: Afghan data breach after MoD official left laptop open on train
  • Snowflake Loses Two More Bids to Dismiss Data Breach Plaintiffs
  • US company with access to biggest telecom firms uncovers breach by nation-state hackers
  • Canada says hacktivists breached water and energy facilities
  • The 4TB time bomb: when EY's cloud went public (and what it taught us)
  • Alan Turing institute launches new mission to protect UK from cyber-attacks
Category: Breach IncidentsExposureHackMiscellaneous

Post navigation

← NZ: Kaeo Primary School privacy breach ‘an error’
UC Riverside Credit/Debit Card Security Breach May Have Affected 5,000; Fraudulent Charges Reported →

2 thoughts on “United Nations: usernames, passwords, and e-mail addresses leaked on the Internet (update2)”

  1. YouSlowOrWhat says:
    November 29, 2011 at 10:13 am

    I found this pastebin post just before midnight, Nov 28th. I went to submit the report on the website within 10 minutes. However, since the government thinks they can get ISP information for ANYONE at ANYTIME, I decided to go through a proxy server. The server didn’t allow forms, so I couldn’t send a notification that way. Went to alert others via e-mail. Decided against that, also, for the same reasons.

    So, due to this wonderful US “Cyber Security”, our government’s heavy-handed treatment and spying on innocent citizens, overstepping the Constitution, and fear of retribution, I sat on it.

    9 hours later the information is reported here. ~850 e-mail addresses, user names and passwords, now out in the world for all to view. First entry was for username: admin. LOL

    Interesting passwords, like 54321, last names, dictionary hacks. Nice these people keep up with safe passwords.

    Unbelievable!

    1. admin says:
      November 29, 2011 at 11:52 am

      If you think my coverage is slow, you should see other sites’. 🙂

      If you’re having trouble submitting a breach lead/tip, you can tweet it to @pogowasright. But do keep in mind that I am not on 24/7. 🙂

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.