Latvia's CSDD suffers massive cyberattack, leaking data of 1.2 million people

cyberattack data breach CSDD Latvia personal data theft

A major cyberattack on Latvia’s Road Traffic Safety Directorate (CSDD) has resulted in the theft of data belonging to approximately 1.2 million individuals and 200,000 companies. The breach involved historical payment records spanning 18 years, exposing sensitive information such as names, personal ID numbers, addresses, vehicle registration numbers, and payment details.

Prime Minister Andris Kulbergs has characterized the incident as a matter of national security, noting that a state-sponsored attack cannot be ruled out. The breach has prompted a criminal investigation by the State Police and a service audit ordered by Transport Minister Rihards Kozlovskis to evaluate the accountability of CSDD leadership.

Cybersecurity experts from CERT.LV noted that the impact was exacerbated because CSDD had not utilized CERT.LV’s services, limiting early detection capabilities. Authorities have warned the public to be vigilant against potential fraud, including social engineering and identity theft, and to verify any communications through official CSDD channels.

Entities

Andris Kulbergs · CSDD · Cert.lv · Latvia · Rihards Kozlovskis

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[○ 1 SOURCE] Transport Minister Rihards Kozlovskis has ordered an investigation into the responsibility of CSDD board and council members.
[○ 1 SOURCE] The incident was difficult to detect early because CSDD did not use the services of the national cybersecurity institution CERT.LV. bnn-news.com
[● 5 SOURCES] A cyberattack on Latvia's Road Traffic Safety Directorate (CSDD) resulted in the theft of data from 1.2 million individuals and 200,000 companies. www.it-boltwise.de · puaro.lv · bnn-news.com · www.finanzen.at
[● 5 SOURCES] Stolen information includes names, personal ID numbers, addresses, vehicle registration numbers, and payment details from the past 18 years. www.it-boltwise.de · puaro.lv · bnn-news.com · www.finanzen.at
[● 2 SOURCES] Prime Minister Andris Kulbergs stated that a state-sponsored attack cannot be ruled out. bnn-news.com · www.finanzen.at
[○ 1 SOURCE] The State Police have launched a criminal process regarding the cyberattack.