Moldova digital public services targeted by large-scale cyberattacks

cyberattack Moldova personal data theft hybrid attacks digital government services

Moldova's digital public services have been targeted by a series of significant cyberattacks aimed at extracting citizens' personal data. The initial incident, detected on the night of October 22, involved approximately 11 million access requests. Authorities from the Electronic Government Agency (AGE), the Information Technology and Cybersecurity Service (STISC), and the Cybersecurity Agency (ASC) responded by preemptively disconnecting targeted platforms to prevent unauthorized data access.

Following the initial breach, specialists identified and blocked a new attempt at forced access to government services around 02:00 on the morning of October 26. As a result of these ongoing security investigations and infrastructure verifications, several digital services remain temporarily unavailable or difficult to access. This includes nine types of permissive documents, such as phytosanitary certificates and import authorizations.

Government officials suspect these incidents are part of a broader series of hybrid attacks against the Republic of Moldova. While investigations continue to determine if any personal data was successfully compromised, authorities have warned citizens of increased fraud risks. Scammers may use stolen information, such as names or personal identification numbers (IDNP), to pose as bank or government employees in phishing attempts via phone, SMS, or email.

Entities

Cybersecurity Agency · Dumitru Ciorici · Electronic Government Agency · Information Technology and Cybersecurity Service · Moldova · Republic of Moldova

Claims

What the coverage asserts, and how many sources carry each claim.

[● 4 SOURCES] Approximately 11 million access requests were recorded during the cyberattack. stiriactuale.info · ziar.md · radiochisinau.md · radiomoldova.md
[● 2 SOURCES] A second attempt at forced access to government services was blocked around 02:00 on October 26. voceabasarabiei.md · www.zdg.md
[○ 1 SOURCE] Nine types of permissive documents, including phytosanitary certificates, cannot be requested online. news.yam.md
[● 3 SOURCES] Authorities have not yet confirmed if attackers successfully extracted personal data. stiriactuale.info · ziar.md · radiomoldova.md
[● 4 SOURCES] Authorities preemptively disconnected targeted services to prevent unauthorized access. stiriactuale.info · ziar.md · radiochisinau.md · radiomoldova.md
[● 4 SOURCES] The cyberattack was detected on the night of October 22. stiriactuale.info · ziar.md · radiochisinau.md · radiomoldova.md
[● 2 SOURCES] Approximately 15 specialists are working to secure the systems. voceabasarabiei.md · www.zdg.md
[○ 1 SOURCE] The government suspects the cyberattacks are part of a hybrid attack series against Moldova. stiriactuale.info