Save the Children confirms data breach; BianLian claims responsibility

Global charity organization Save the Children, founded in 1919 with a mission to protect and educate children worldwide and reporting an annual income of $2.5 billion last year, has fallen victim to a significant data breach, with the cybercrime group BianLian claiming responsibility.

 

The incident came to light as BianLian posted details of the breach on their victim blog, indicating a breach of an international NGO employing over 25,000 staff and operating in 116 countries – a description closely matching Save the Children.

 

The stolen data reportedly includes personal, financial, and medical information of the charity’s staff and internal email correspondence. Notably, BianLian has not yet published any stolen information, nor have they made any public ransom demands.

 

Save the Children acknowledged the unauthorized access to part of its network and assured that there had been no operational disruption due to the breach. A spokesperson for the organization stated, "We are working diligently with external specialists to determine the extent of the breach and its impact so that we can take the necessary actions to address it. Our IT systems remain secure, and we have confidence in the continued integrity of our IT infrastructure."

 

This marks the third cyberattack on Save the Children in recent years. In 2020, the organization admitted to a breach involving some supporters’ giving history and contact information. In 2017, they fell victim to a phishing scam, losing nearly $1 million.

 

The identity and origins of the cybercriminal group BianLian remain enigmatic. According to the US Cybersecurity and Infrastructure Security Agency (CISA), the group has been targeting hospitals and critical national infrastructure in Europe, the US, and Australia since at least June 2022. Earlier this year, the group transitioned from ransomware attacks to data extortion, with previous targets including St. Rose Hospital in California and the Murfreesboro Medical Clinic in Tennessee.