Skip to content

International Committee of the Red Cross

Disclosed Jan 18, 20224 years ago515,000 affectedConfirmed

Official notice

Hack of ICRC servers exposes data of more than 515,000 vulnerable people

The ICRC said attackers breached servers holding data on more than 515,000 people, including missing persons, their families and detainees served by the Red Cross and Red Crescent Movement. It later said the intrusion began on November 9, 2021 through an unpatched vulnerability and bore hallmarks of state-backed hackers.

What is known

People affected515,000 (as reported by the organization)
DisclosedJan 18, 2022
DiscoveredJan 2022
AttackHacking
Data exposedNames, Location, Phone numbers, Other
SectorNonprofit · CH
StatusConfirmed

Sources

Source
Red Cross says 'state-sponsored' hackers exploited unpatched vulnerabilitytechcrunch.com · News
Cyber-attack on ICRC: What we knowicrc.org · Official notice

Notices filed

WhereFiledPeople
ResearchtotalJan 18, 2022515,000
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about International Committee of the Red Cross

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.