It's a strong possibility that someone accessed the vulnerable database before it could be patched.
Sourcehttps://www.itproportal.com/news/united-nations-discloses-possible-data-breach/
Source