Monitor this situation.

Unsubscribe anytime.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 12 sources · 5 days · First seen 6 days ago · Last updated 1 day ago

Latvia CSDD cyberattack and data breach

Overview

The Latvian Road Traffic Safety Directorate (CSDD) was targeted by a sophisticated cyberattack that resulted in unauthorized access to its IT systems. Initial reports indicated that attackers obtained historical payment data, including personal codes, names, company names, payment amounts, and vehicle license plates. While officials initially stated that usernames and passwords were not compromised, the breach posed a risk of future targeted fraud.

As the situation developed, the scale of the breach was revealed to involve the personal data of approximately 1.2 million individuals and data concerning 200,000 legal entities. The stolen information included records spanning the previous 18 years.

Prime Minister Andris Kulbergs characterized the incident as a matter of “national security” and noted that the possibility of state-sponsored involvement could not be ruled out. The Prime Minister also criticized the leadership at CSDD for delayed reporting and cited a broader issue of “IT security infantilism” within state institutions.

In response to the breach, the State Police have launched a criminal investigation, and Transport Minister Rihards Kozlovskis has ordered a service audit to evaluate the accountability of CSDD leadership. Cybersecurity experts from CERT.LV noted that the impact was exacerbated because CSDD had not utilized CERT.LV’s services, which limited early detection capabilities. Authorities have advised the public to remain vigilant against fraudulent communications, including social engineering and identity theft.

Entities

Cert.lv · CSDD · Rihards Kozlovskis · Andris Kulbergs · Varis Teivāns

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[● 5 SOURCES] A cyberattack on Latvia's Road Traffic Safety Directorate (CSDD) resulted in the theft of data from 1.2 million individuals and 200,000 companies. www.it-boltwise.de · jauns.lv · puaro.lv · bnn-news.com · www.finanzen.at
[● 5 SOURCES] Stolen information includes names, personal ID numbers, addresses, vehicle registration numbers, and payment details from the past 18 years. www.it-boltwise.de · jauns.lv · puaro.lv · bnn-news.com · www.finanzen.at
[● 2 SOURCES] Prime Minister Andris Kulbergs stated that a state-sponsored attack cannot be ruled out. bnn-news.com · www.finanzen.at
[○ 1 SOURCE] The incident was difficult to detect early because CSDD did not use the services of the national cybersecurity institution CERT.LV. bnn-news.com
[○ 1 SOURCE] Transport Minister Rihards Kozlovskis has ordered an investigation into the responsibility of CSDD board and council members. jauns.lv
[○ 1 SOURCE] The State Police have launched a criminal process regarding the cyberattack. jauns.lv

Timeline

1 day ago

[TECHNOLOGY] 9 sources
Latvia's CSDD suffers massive cyberattack, leaking data of 1.2 million people
A cyberattack on Latvia's CSDD has leaked the personal and corporate data of 1.2 million individuals and 200,000 companies, prompting a criminal investigation and national security concerns.
6 days ago

[TECHNOLOGY] 4 sources
CSDD targeted by sophisticated cyberattack in Latvia
A sophisticated cyberattack on Latvia's CSDD resulted in the theft of historical payment data and some personal information, including vehicle plates and addresses, though passwords remain secure.

Sources

apollo.lv · bnn-news.com · egovernment.de · financenet.lv · finanzen.at · it-boltwise.de · jauns.lv · la.lv · nachrichten.at · ogrenet.lv · puaro.lv · santa.lv

This summary has been updated 1 time: see revision history