Consumer Rights Protection Centre in Latvia hit by cyberattack

The Consumer Rights Protection Centre (PTAC) in Latvia has experienced a cyberattack on its Remote Statistical Data Extraction System (ASDIS). The breach resulted in the theft of contact information belonging to 697 business representatives and 34 PTAC officials. The compromised data includes names, email addresses, and telephone numbers.

According to CERT.lv, the attacker exploited a vulnerability in the public-facing portion of the system to gain access via the internet. The incident was detected by CERT.lv while monitoring internet data, after an attacker posted information claiming the system had been breached. While the data was stolen, no ransom was demanded.

PTAC stated that the stolen information, primarily related to consumer credit providers, debt recovery services, and complex tourism providers, is largely available in other public registers. The agency confirmed that supervisory data submitted by businesses was not compromised, and the affected system has been shut down.