Lithuania's Interior Ministry reports cyberattack on EPEKIS system

Lithuania’s Interior Ministry has reported a cyberattack on the EPEKIS information system, which is administered by the Information Technology and Communications Department (IRD). The EPEKIS system serves as an archival database for public services related to the issuance of personal documents and consultations for citizens and foreigners.

Since 2018, the system has not been in active use and primarily contains archived data regarding foreign nationals who applied for Lithuanian citizenship. Most of the stored information consists of names without personal identification numbers. While hackers gained unauthorized access and generated certain datasets, authorities stated there is currently no evidence that any data was actually downloaded.

Interior Minister Martynas Katelinas noted that recently implemented security measures, such as two-factor authentication, allowed officials to detect the breach and prevent it from spreading. The incident has been referred to the Criminal Police Bureau, the State Data Protection Inspectorate, and the National Cyber Security Centre. Katelinas has ordered a comprehensive security review of all information systems and databases under the ministry’s authority.