[REVISION HISTORY]

Latvia CSDD cyberattack and data breach

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-08-18 14:35 UTC → 2026-08-18 15:24 UTC · added ~~removed~~

The Latvian Road Traffic Safety Directorate (CSDD) was targeted by a sophisticated cyberattack that resulted in unauthorized access to its IT systems. Initial reports indicated that attackers obtained historical payment data, including personal codes, names, company names, payment amounts, and vehicle license plates. While officials initially stated that usernames and passwords were not compromised, the breach posed a risk of future targeted fraud. As the situation developed, the scale of the breach was revealed to involve the personal data of approximately 1.2 million individuals and data concerning 200,000 legal entities. The stolen information included records spanning the previous 18 years. Prime Minister Andris Kulbergs characterized the incident as a matter of “national security” and noted that the possibility of state-sponsored involvement could not be ruled out. The Prime Minister also criticized the leadership at CSDD for delayed reporting and cited a broader issue of “IT security infantilism” within state institutions. ~~Authorities~~ In response to the breach, the State Police have launched a criminal investigation, and Transport Minister Rihards Kozlovskis has ordered a service audit to evaluate the ~~cybersecurity institution~~ accountability of CSDD leadership. Cybersecurity experts from CERT.LV noted that the impact was exacerbated because CSDD had not utilized CERT.LV’s services, which limited early detection capabilities. Authorities have advised the public to remain vigilant against fraudulent ~~communications.~~ communications, including social engineering and identity theft.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.