Data Breaches

Norad breach leaves high-risk users' exposure uncertain

Norad confirmed a cyberattack that stole names and email addresses for all 20,614 registered users of its grant portal, The Register reported.

Norad also said information from applications by at least three organizations was “misdirected.” It cannot confirm whether information about people in conflict areas or authoritarian states was exposed. The report does not specify what those applications contained or whether that information was accessed.

If those applications included sensitive information about people in high-risk places, Norad’s uncertainty leaves aid partners unable to tell from this report who may face personal risk.

2 sources · Nov 5

Timeline

Sources

Part of the PlainSec briefing for 2026-11-05

Every edition of this story: Norad breach leaves high-risk users' exposure uncertain