Birthrightarmenia.org

In early 2023 an unauthorized actor gained access to the database of Birthright Armenia which is an organization providing volunteer and internship programs. The incident resulted in the exposure of sensitive volunteer records stored within their systems. The breach compromised personal details of international participants who applied for or participated in the program within Armenia. Analysis suggests the data was exfiltrated due to a vulnerability in the web application or misconfigured server settings allowing external access to the backend storage.