WFP says cyberattack exposed data of 600,000 Gaza households

What Happened

The World Food Programme disclosed a security breach affecting approximately 600,000 Palestinian households in Gaza, exposing personal information collected through a self-registration application used for food and cash assistance applications. According to The New Humanitarian, the WFP characterized the incident as "security-related" and has begun notifying affected households. The compromised data was gathered through the aid application system, though the WFP has not publicly specified the nature of the breach, the extent of data exposed, or whether the incident was a cyberattack, system failure, or unauthorized access.

Key Actors

Why It Matters

The breach exposes sensitive personal information of nearly the entire Gaza population (approximately 2.3 million total) at a time when humanitarian needs are acute and aid dependency is widespread. Compromised registration data could enable targeting of vulnerable populations, fraud in aid distribution systems, or exploitation by armed groups seeking intelligence on household compositions and locations. The incident also raises questions about data security protocols for humanitarian organizations operating in conflict zones, where digital infrastructure is fragile and the risk of malicious actors—state or non-state—seeking access to civilian data is elevated.

Watch For

Monitor for WFP's full disclosure of the breach's technical nature, timeline, and specific data fields compromised (names, addresses, family sizes, biometric data). Watch whether the breach affects WFP's ability to continue aid distribution in Gaza or prompts suspension of digital registration systems. Track any reports of misuse of the exposed data, including targeting of households or fraud attempts. Observe whether other UN agencies or NGOs operating in Gaza conduct audits of their own data security systems in response.