Hackers from underground hacking group TeamP0ison posted hundreds of e-mail addresses and passwords online that they claimed to have taken from a UNDP server. Many of the pilfered addresses were for accounts belonging to the United Nations Development Programme (UNDP), the UN s primary agency for promoting economic development around the world. The UN has come under scrutiny before for allowing gaping holes in its cyber defenses. In one instance, a SQL injection vulnerability that was used to deface a UN Web site was left unpatched for three years.
Source: https://threatpost.com/un-says-old-server-old-data-exposed-teamp0ison-hack-113011/75941/