Central Depository in Romania targeted by cyberattack

The Central Depository, the institution responsible for recording financial instrument holdings on Romania's capital market, has been the target of a cyberattack. Unauthorized individuals accessed personal data through the ‘Online Services for Investors’ application, which is used by individual investors to create accounts and access online services.

Exposed information includes full names, residential addresses, personal identification numbers (CNP), identity card series and numbers, email addresses, phone numbers, and IBAN codes. While the data was accessed, the institution stated that the information was not modified or altered. Financial holdings and settled transactions were not compromised, and registry and settlement activities have continued as normal.

The Bucharest Stock Exchange (BVB) confirmed that its own infrastructure and trading systems were not affected by the incident and that trading continues according to the usual schedule. The Central Depository has intensified system monitoring and is collaborating with authorities to investigate the breach. Investors are advised to use unique passwords, enable two-factor authentication, and remain vigilant against phishing attempts.