CSDD cyberattack exposes data of 1.2 million people in Latvia

CSDD cyberattack data breach Latvia national security personal data theft road traffic agency

A major cyberattack on Latvia’s Road Traffic Safety Directorate (CSDD) has resulted in the theft of personal data belonging to approximately 1.2 million people and 200,000 legal entities. The breach, which occurred between August 7 and August 8, involved unauthorized access to historical payment receipt data dating back to 2008.

The stolen information includes names, personal identification numbers, addresses, vehicle registration numbers, and payment details. CSDD officials clarified that phone numbers, email addresses, and banking credentials were not compromised. However, experts warn that the stolen data could be used for sophisticated phishing and social engineering attacks.

The incident has triggered a political crisis. Transport Minister Rihards Kozlovskis has ordered an expedited service audit to assess the accountability of CSDD leadership. CSDD Board Chairman Aivars Aksenoks has expressed his intention to resign following the conclusion of the official investigation. Prime Minister Andris Kulbergs noted the possibility that the breach was a foreign hybrid attack targeting critical infrastructure.

While CSDD’s online and in-person services remain operational, the agency and CERT.LV have urged the public to remain vigilant against fraudulent communications appearing to originate from the directorate.

Entities

Aivars Aksenoks · Andris Kulbergs · CSDD · Cert.lv · Edgars Rinkēvičs · Latvia · Rihards Kozlovskis · Road Safety Directorate · Road Traffic Safety Directorate · Tet

Claims

What the coverage asserts, and how many sources carry each claim.

[● 10 SOURCES] A cyberattack on CSDD resulted in the theft of personal data belonging to approximately 1.2 million people and 200,000 legal entities. puaro.lv · nra.lv · www.ogrenet.lv · dzirkstele.lv · iauto.lv · +2 more
[● 6 SOURCES] Transport Minister Rihards Kozlovskis has ordered a service audit to assess the accountability of CSDD leadership regarding the data breach. nra.lv · www.ogrenet.lv
[● 2 SOURCES] The cyberattack exploited a vulnerability in a CSDD system accessible via the internet. nra.lv
[● 5 SOURCES] The cyberattack on CSDD took place during the night between August 7 and August 8. nra.lv · www.ogrenet.lv · puaro.lv
[● 6 SOURCES] The IT infrastructure monitoring company Tet failed to detect or report the cyberattack to CSDD. www.ogrenet.lv · nra.lv
[● 10 SOURCES] The stolen data includes names, personal identification codes, addresses, vehicle registration numbers, and payment information. puaro.lv · www.ogrenet.lv · nra.lv · bauskasdzive.lv · dzirkstele.lv · +4 more
[● 3 SOURCES] CSDD Board Chairman Aivars Aksenoks has expressed readiness to resign, but intends to stay until the cyberattack investigation is complete. puaro.lv · nra.lv · www.ogrenet.lv
[○ 1 SOURCE] Prime Minister Andris Kulbergs suggested the cyberattack might have been a foreign hybrid attack targeting critical infrastructure. nra.lv