International Centre for Migration Policy Development (ICMPD)

The International Centre for Migration Policy Development (ICMPD) operates as an international organization focused on migration policy development and capacity building. Its core activities involve facilitating dialogue between governments, providing technical expertise on migration governance, and supporting operational cooperation across migration routes. The organization engages with state authorities and international partners to address migration challenges through policy frameworks, research initiatives, and training programs. Its work spans multiple geographic regions, with a focus on fostering collaborative approaches to migration management.

A 2022 cyberattack against ICMPD by the Karakurt extortion group revealed operational aspects of its data handling. Attackers compromised approximately 375 GB of sensitive organizational data including financial records, contractual agreements, internal correspondence, and passport documentation. The breach triggered an emergency response that severed external network connections and disabled public-facing websites within 45 minutes of detection to limit data exfiltration. Forensic investigations involved collaboration with external cybersecurity specialists and law enforcement agencies, followed by notifications to potentially affected individuals. This incident highlighted ICMPD's management of sensitive migration-related data and its adherence to incident containment protocols when facing advanced threats from financially motivated threat actors. The Karakurt group's established tactics—including credential-based intrusions and coercive communications targeting employees and partners—align with broader patterns of ransomware-affiliated cybercrime targeting international organizations.