Romania's Cadastre Agency recovers after ransomware attack

ANCPI ransomware e‑Terra cloud migration Romania cyber security inheritance tax exemption real estate market impact

A ransomware attack on the National Cadastre and Real‑Estate Publicity Agency (ANCPI) began on 14 July 2026, disabling the e‑Terra system and halting property‑registration procedures. The outage caused an estimated daily economic loss of €60.75 million and affected about 27 000 properties, immobilising roughly €850.5 million in assets.

The Romanian government rebuilt the agency’s IT infrastructure, migrated the e‑Terra application to the Government Cloud and is now carrying out final security, functionality and performance tests under the oversight of the National Cybersecurity Directorate, the Special Telecommunications Service and Cyberint. It has also issued directives for all public institutions to strengthen cyber‑security, verify backups and update continuity plans.

The Senate passed a temporary exemption from the 1 % inheritance‑tax surcharge for heirs whose two‑year deadline falls between 14 July and 30 September 2026, and Latvia has provided investigative assistance. The National Penitentiary Administration suffered a separate ransomware attack on the night of 28‑29 July 2026, though essential prison operations continued.

Real‑estate firms, such as RE/MAX Romania, report liquidity pressure as many transactions remain pending. ANCPI has spent tens of millions of lei on system maintenance in recent years, including a 11.6‑million‑lei contract for e‑Terra. Data stolen in the attack were posted for sale, and the hacker claims to have deleted the backups.

Entities

ANCPI · Forbes România · National Cadastre and Real‑Estate Publicity Agency (ANCPI) · National Directorate for Cyber‑Security (DNSC) · National Penitentiary Administration (ANP) · RE/MAX România · Romanian Government · Romanian Senate · Răzvan Cuc · e‑Terra application · e‑Terra platform

Claims

What the coverage asserts, and how many sources carry each claim.

[● 6 SOURCES] A ransomware attack on the National Cadastre and Real‑Estate Publicity Agency (ANCPI) began on 14 July 2026 and disabled its systems. focuspress.ro · www.radioconstanta.ro · adevarul.ro · www.europafm.ro · spotmedia.ro · +1 more
[● 2 SOURCES] The attack caused an estimated daily economic loss of €60.75 million. psnews.ro
[○ 1 SOURCE] Latvia provided investigative assistance to Romania regarding the cadastre cyberattack. spotmedia.ro
[○ 1 SOURCE] The prolonged cadastre outage created liquidity pressure on Romanian real‑estate agencies, with delayed transactions reported by RE/MAX. psnews.ro
[● 2 SOURCES] The Romanian Senate passed a temporary exemption from the 1 % inheritance‑tax surcharge for cases impacted between 14 July and 30 September 2026. focuspress.ro · newsweek.ro
[● 6 SOURCES] The government migrated the e‑Terra application to the Government Cloud and is conducting final security, functionality and performance tests. www.radioconstanta.ro · adevarul.ro · www.europafm.ro · spotmedia.ro · viitorulilfovean.ro · +1 more
[○ 1 SOURCE] The National Penitentiary Administration suffered a ransomware attack on the night of 28‑29 July 2026, but essential prison operations continued. www.desteptarea.ro
[○ 1 SOURCE] ANCPI spent a total of 68 million lei on system maintenance in recent years, including a 11.6 million‑lei contract for e‑Terra maintenance. hotnews.ro
[○ 1 SOURCE] The ANCPI block affected about 27 000 properties, immobilising roughly €850.5 million and costing €60.75 million per day.