[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

9 clusters · 28 sources · 35 days · First seen · Last updated

Latvia CSDD cyberattack and data breach

Overview

The Latvian Road Traffic Safety Directorate (CSDD) was targeted by a sophisticated cyberattack that resulted in unauthorized access to its IT systems. The breach, which occurred during the night of August 7–8, involved the theft of personal data belonging to approximately 1.2 million individuals and 200,000 legal entities, with stolen records spanning the previous 18 years. Compromised information includes names, personal identification codes, addresses, vehicle registration numbers, and historical payment details. CSDD has clarified that phone numbers, email addresses, bank details, and e-CSDD login credentials were not compromised.

The incident has triggered a political crisis. Prime Minister Andris Kulbergs characterized the attack as a potential foreign hybrid operation and criticized CSDD’s security protocols, stating the agency had left its “cybersecurity doors wide open” due to a lack of required multi-factor authentication. Following the breach, President Edgars Rinkēvičs called for the resignation of CSDD leadership, while Transport Minister Rihards Kozlovskis ordered an expedited service investigation.

A subsequent investigation by a commission from the Ministry of Transport identified multiple cybersecurity failures that facilitated the breach. The commission found that vulnerabilities in the “med. csdd. lv” web application allowed attackers initial access. Specific deficiencies included incomplete security audits, insufficient network protection, flaws in software development, and a lack of multi-factor authentication. Minister Kozlovskis noted that these errors and instances of inaction prevented the full mitigation of cyberattack risks. While the commission focused on technical recommendations, the assessment of official responsibility has been referred to law enforcement agencies to address questions of legal compliance and accountability.

Entities

CSDD · Cert.lv · Road Traffic Safety Directorate · Rihards Kozlovskis · Andris Kulbergs

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 4 sources
    Latvian Ministry of Transport finds cybersecurity failures at CSDD

    A Latvian Ministry of Transport investigation found that cybersecurity failures at the CSDD, including inadequate authentication and software flaws, enabled a significant data breach.

  2. [TECHNOLOGY] 2 sources
    Cert.lv warns of Microsoft account exploits and CSDD phishing in Latvia

    Cert.lv warns of new cyber threats in Latvia, including Microsoft account hijacking via device code exploits and phishing campaigns impersonating CSDD following a major data breach.

  3. [TECHNOLOGY] 5 sources
    CSDD enables clients to check for personal data leaks following cyberattack

    CSDD clients can now check the e.csdd.lv portal to see if their personal data was stolen during a recent cyberattack involving payment receipt tables.

  4. [TECHNOLOGY] 2 sources
    LVRTC advises eParaksts mobile users to update ID numbers after CSDD cyberattack

    Following a cyberattack on Latvia's CSDD, LVRTC advises eParaksts mobile users to change their ID numbers if they currently use their personal identity code to prevent unauthorized access to e-services.

  5. [TECHNOLOGY] 3 sources
    Latvian security agencies evaluate risks after CSDD cyberattack

    Latvian security agencies are assessing risks and considering vehicle plate changes following a major CSDD cyberattack that leaked personal data and vehicle registration information.

  6. [CRIME] 3 sources
    CSDD cyberattack compromises data of 1.2 million people in Latvia

    A cyberattack on Latvia's CSDD has compromised the data of 1.2 million people and 200,000 legal entities, sparking investigations into security failures and potential conflicts of interest.

  7. [INTERNATIONAL] 14 sources
    CSDD cyberattack exposes data of 1.2 million people in Latvia

    A cyberattack on Latvia’s CSDD has exposed the personal data of 1.2 million people and 200,000 entities, prompting leadership resignations and investigations into potential hybrid warfare.

  8. [INTERNATIONAL] 14 sources
    Latvia's CSDD suffers massive cyberattack leaking 1.2 million users' data

    A massive cyberattack on Latvia's CSDD has leaked the personal and business data of 1.2 million people and 200,000 companies, prompting calls for leadership resignations and a national security investigation.

  9. [TECHNOLOGY] 4 sources
    CSDD targeted by sophisticated cyberattack in Latvia

    A sophisticated cyberattack on Latvia's CSDD resulted in the theft of historical payment data and some personal information, including vehicle plates and addresses, though passwords remain secure.

Sources

apollo.lv · bauskasdzive.lv · bnn-news.com · cert.lv · ciklons.tvnet.lv · dzirkstele.lv · egovernment.de · fakt.pl · financenet.lv · finanzen.at · iauto.lv · innpoland.pl · ir.lv · it-boltwise.de · itnerd.blog · jauns.lv · kuldigasnovads.lv · la.lv · neatkariga.nra.lv · nra.lv · ogrenet.lv · perthnow.com.au · puaro.lv · romaniaregional.ro · santa.lv · therecord.media · tvnet.lv · wprost.pl

This summary has been updated 14 times: see revision history