Romanian Land Registry Cyberattack Halts Real Estate Transactions
On 14 July 2026 a cyber attack targeted Romania’s National Agency for Cadastre and Real Estate Registration (ANCPI), taking the e‑Property registration system offline. The outage prevented notaries from issuing ownership certificates, registering mortgages and finalising sales contracts, effectively paralysing the country’s real‑estate market.
A hacker using the alias “ByteToBreach” claimed to have demanded payment to keep the stolen data private and said the attacker deleted system backups. Romanian authorities confirmed on 16 July 2026 that the incident was a cyber attack, but ANCPI stressed that its core databases were intact and no data had been permanently lost. Investigations showed the breach exploited outdated Windows XP servers and compromised credentials.
The disruption coincides with a scheduled 1 August 2026 increase in VAT on new homes, raising pressure on thousands of buyers and developers. The government has begun rebuilding the affected infrastructure, migrating applications to a secure government cloud and verifying data integrity to restore normal operation.
Entities: ByteToBreach · National Agency for Cadastre and Real Estate Registration (ANCPI) · Romanian Government
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [○ 1 SOURCE] A hacker using the alias “ByteToBreach” claimed to have demanded payment to avoid publishing stolen data and said they deleted backups. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
- [○ 1 SOURCE] The government is rebuilding the infrastructure, migrating applications to a government cloud, and verifying data integrity. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
- [○ 1 SOURCE] The disruption occurred shortly before a VAT increase on new homes effective 1 August 2026, affecting many buyers and developers. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
- [○ 1 SOURCE] The breach exploited outdated Windows XP servers and compromised credentials. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
- [● 3 SOURCES] A cyber attack on 14 July 2026 disabled the ANCPI e‑Property registration system in Romania. (f279dac6-0ab3-4103-ae4a-a65308a1c449, 6584f396-8088-45d1-ab92-2b8d4bc2a71e, c0e6b1aa-1253-4a3f-b631-162c3385456c)
- [○ 1 SOURCE] ANCPI said its core databases were not destroyed and data had not been permanently lost. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
- [○ 1 SOURCE] Romanian authorities confirmed on 16 July 2026 that the incident was a cyber attack. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
- [○ 1 SOURCE] The outage prevented notaries from issuing ownership certificates, registering mortgages and finalising sales contracts. (f279dac6-0ab3-4103-ae4a-a65308a1c449)