1. [News](/news) 2. World Food Programme data breach exposes sensitive data of 600,000 households World Food Programme # World Food Programme data breach exposes sensitive data of 600,000 households A data breach involving World Food Programme was reported in June 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team June 2, 2026 Table of Contents * [What happened in the World Food Programme data breach?](#what-happened-in-the-world-food-programme-data-breach) * [Who is behind the incident?](#who-is-behind-the-incident) * [Impact and risks for World Food Programme customers](#impact-and-risks-for-world-food-programme-customers) * [How to protect against similar security incidents](#how-to-protect-against-similar-security-incidents) ## Key facts: World Food Programme data breach * Date occurred May 14, 2026 * Date discovered June 2, 2026 * Date reported June 1, 2026 * Target entity World Food Programme * Source of breach Unknown, unauthorized third-party * Data types Names, ID numbers, mobile numbers, location data * Status Confirmed; reported on June 1, 2026. * Severity High; exposure of sensitive identification and location data for vulnerable populations increases risks of targeted harassment and identity theft. ## What happened in the World Food Programme data breach? World Food Programme (wfp.org) experienced a high-severity data breach involving unauthorized access to its self-registration application. The incident was publicly reported on June 1, 2026. At this time, no specific threat actor has been identified as responsible for the attack, and an investigation into the intrusion is currently ongoing. The breach occurred on May 14, 2026, and resulted in the exposure of sensitive personal information belonging to approximately 600,000 households in Gaza. Compromised data includes names, ID numbers, mobile numbers, and location details. This incident is considered high-severity due to the volume of records and the sensitivity of humanitarian beneficiary data, potentially representing the largest breach of its kind to date. Such breaches typically lead to heightened risks of social engineering and targeted physical or digital surveillance. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for World Food Programme customers For the affected households, the exposure of ID numbers and precise location data carries significant risks, including identity theft, credential abuse, and targeted phishing campaigns. Given the context of the region, the leakage of location data and mobile numbers could also lead to physical security concerns or harassment via digital channels. The breach of humanitarian data is particularly sensitive as it involves vulnerable populations who may have limited means to secure their digital identities. Such incidents often lead to long-term privacy concerns and potential exclusion from essential services. Affected individuals should remain vigilant against unsolicited communications and monitor for any unauthorized use of their identification details. Engaging with official humanitarian support channels for guidance is recommended. Greater transparency regarding the breach helps organizations and beneficiaries improve their defensive posture. ## How to protect against similar security incidents Following the data breach at the World Food Programme, which exposed identification and location data, it is crucial for organizations and individuals to enhance their security protocols. * **Implement phishing-resistant MFA.** Deploy multi-factor authentication across all sensitive applications. Use hardware security keys or biometric factors where possible. Educate users on identifying sophisticated social engineering attempts. * **Enhance attack surface management.** Conduct regular audits of self-registration applications and public-facing portals. Identify and secure misconfigured cloud assets or databases. Monitor for unauthorized access patterns in real-time. * **Protect sensitive identification data.** Use encryption for data at rest and in transit for all beneficiary records. Implement strict access controls based on the principle of least privilege. Regularly rotate administrative credentials for database access. > Proactive monitoring and robust security frameworks are essential to safeguarding sensitive humanitarian data. ## Frequently asked questions ### What happened in the World Food Programme security breach? On June 1, 2026, World Food Programme (wfp.org) disclosed a security breach. According to initial reports, a cyber-attack targeting the agency’s self-registration application exposed sensitive personal information belonging to approximately 600,000 households in Gaza, including names, ID numbers, mobile numbers, and location data. ### When did the World Food Programme breach occur? The World Food Programme breach was publicly reported on June 1, 2026. The exact date of the attack has been identified as May 14, 2026. ### What data was exposed? The types of data involved in the World Food Programme incident include names, ID numbers, mobile numbers, and location data. This page will be updated as verified information becomes available. ### Is my personal information at risk? If you interacted with World Food Programme, there’s a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts. ### What steps should companies take after being breached? World Food Programme is likely working to secure systems, notify affected parties, and provide guidance on protective actions. They should also review security measures and deploy attack surface management to prevent future occurrences. ## Is your organization exposed to a similar risk? UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline. [Start your free trial](https://cyber-risk.upguard.com/register/trial) ## How secure is World Food Programme? World Food Programme provides food assistance and humanitarian aid to populations affected by emergencies, conflicts, natural disasters, and climate-related crises. The organization operates programmes including emergency food distribution, school feeding, nutrition support, and cash-based transfers across more than 120 countries. * View our free preliminary report on World Food Programme's security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View World Food Programme's score View score](/security-report/world-food-programme) [https://wfp.org/](/security-report/world-food-programme) ## Latest news Stay up-to-date with the latest news in cybersecurity. * ### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 20, 2026 * ### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 17, 2026 * ### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. UpGuard Team July 16, 2026 * ### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 * ### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. UpGuard Team July 16, 2026 [View all news](/news) ## Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.