The International Civil Aviation Organization (ICAO), a United Nations agency overseeing global aviation standards, is conducting an investigation into a possible security breach following claims made on a hacker forum on January 6, 2025. The Canada-based organization revealed that tens of thousands of records may have been stolen by a threat actor known for targeting international organizations. Previously targeted in 2016, the ICAO has implemented immediate security measures while they delve deeper into the breach. Specific details about the incident and the nature of the stolen data are yet to be confirmed as the investigation progresses. This incident raises concerns about the security of sensitive information, especially as the ICAO has been a previous target of data breaches. The involvement of Panda Emissary, a China-linked hacker group in the 2016 attack, further complicates the current situation, leaving questions about potential ties to state-sponsored actors. The ICAO’s response to this breach underscores the increasing threats faced by international organizations and the ongoing need for robust cybersecurity measures.