The names, email addresses, gender and professional information of 8,253 users of UNICEF’s online learning portal Agora. The leaked information included duty stations, supervisor names and contract types of individuals who had enrolled in the courses. The information was included in the email when the internal user ran a report. Security experts say the leak was the result of human error. The incident highlights the importance of security at an infrastructure level, but also at the individual level, security experts said. The stakes are higher for organizations that leak data since the General Data Protection Regulation (GDPR) went into effect in Europe last May.
Source: https://threatpost.com/unicef-leaks-personal-data-of-8000-users-via-email-blunder/148270/