Cyberattack targets Red Cross Red Crescent data 

January 2022: A sophisticated cyber security attack against computer servers hosting information held by the International Committee of the Red Cross (ICRC) was detected this week



The attack compromised personal data and confidential information on more than 515,000 highly vulnerable people, including those separated from their families owing to conflict, migration and disaster, missing persons and their families and people in detention. The data originated from at least 60 Red Cross and Red Crescent National Societies around the world.
 
The ICRC’s most pressing concern following this attack is the potential risks that come with this breach – including confidential information being shared publicly – for people that the Red Cross and Red Crescent network seeks to protect and assist, as well as their families. When people go missing, the anguish and uncertainty for their families and friends is intense.
 
“An attack on the data of people who are missing makes the anguish and suffering for families even more difficult to endure. We are all appalled and perplexed that this humanitarian information would be targeted and compromised,” said Robert Mardini, ICRC’s director-general. “This cyberattack puts vulnerable people, those already in need of humanitarian services, at further risk.”
 
The ICRC has no immediate indications as to who carried out this cyber-attack, which targeted an external company in Switzerland that the ICRC contracts to store data. There is not yet any indication that the compromised information has been leaked or shared publicly.
 
“While we don’t know who is responsible for this attack, or why they carried it out, we do have this appeal to make to them,” says Mardini. “Your actions could potentially cause yet more harm and pain to those who have already endured untold suffering. The real people, the real families behind the information you now have are among the world's least powerful. Please do the right thing. Do not share, sell, leak or otherwise use this data.”
 
The ICRC along with the wider Red Cross and Red Crescent network runs a programme called Restoring Family Links that seeks to reunite family members separated by conflict, disaster or migration. Because of the attack, it has been obliged to shut down the systems underpinning its Restoring Family Links work, affecting the Red Cross and Red Crescent Movement’s ability to reunite separated family members. It is working as quickly as possible to identify workarounds to continue this vital work.
 
“Every day, the Red Cross Red Crescent Movement helps reunite on average 12 missing people with their families. That’s a dozen joyful family reunifications every day. Cyber-attacks like this jeopardise that essential work,” Mardini says. “We are taking this breach extremely seriously. We are working closely with our humanitarian partners worldwide to understand the scope of the attack and take the appropriate measures to safeguard our data in the future.”

Image: NicolElNino/Adobe Stock