Latvia's CSDD suffers massive cyberattack leaking 1.2 million users' data

CSDD cyberattack Latvia data breach national security CERT.LV identity theft

A major cyberattack on Latvia's Road Traffic Safety Directorate (CSDD) has resulted in the theft of sensitive data belonging to approximately 1.2 million individuals and 200,000 companies. The breach involved historical payment records spanning the last 18 years, including names, personal ID numbers, addresses, vehicle registration numbers, and payment details.

Prime Minister Andris Kulbergs has characterized the incident as a matter of national security and stated that a state-sponsored hybrid attack cannot be ruled out. The breach has drawn sharp criticism from government officials, with President Edgars Rinkēvičs calling for the resignation of the CSDD leadership due to the loss of public trust.

Investigations by CERT.LV revealed that the attackers exploited a vulnerability in a publicly accessible system. Furthermore, the agency noted that CSDD had failed to meet several mandatory security requirements for Class A information systems, such as multi-factor authentication. The State Police have launched a criminal investigation into the matter.

Entities

Andris Kulbergs · CSDD · Cert.lv · Edgars Rinkēvičs · Latvia · Rihards Kozlovskis

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] Transport Minister Rihards Kozlovskis has ordered an investigation into the responsibility of CSDD board and council members.
[○ 1 SOURCE] The incident was difficult to detect early because CSDD did not use the services of the national cybersecurity institution CERT.LV. bnn-news.com
[● 8 SOURCES] A cyberattack on Latvia's Road Traffic Safety Directorate (CSDD) resulted in the theft of data from 1.2 million individuals and 200,000 companies. www.it-boltwise.de · puaro.lv · bnn-news.com · www.finanzen.at · www.fakt.pl · +1 more
[● 8 SOURCES] Stolen information includes names, personal ID numbers, addresses, vehicle registration numbers, and payment details from the past 18 years. www.it-boltwise.de · puaro.lv · bnn-news.com · www.finanzen.at · www.fakt.pl · +1 more
[● 5 SOURCES] Prime Minister Andris Kulbergs stated that a state-sponsored attack cannot be ruled out. bnn-news.com · www.finanzen.at · www.egovernment.de · www.it-boltwise.de · www.fakt.pl
[● 3 SOURCES] The State Police have launched a criminal process regarding the cyberattack. www.la.lv
[● 2 SOURCES] President Edgars Rinkēvičs stated that the CSDD leadership should resign due to the damage to the institution's reputation and public trust. www.la.lv
[● 3 SOURCES] The investigation found that CSDD failed to comply with several Cabinet of Ministers requirements for Class A information systems, including multi-factor authentication. www.la.lv