Romania PNRR implementation and ANCPI cyberattack

Claims

What the coverage asserts, and how many sources carry each claim.

• [DISPUTED] The attacker deleted hundreds of thousands of files, including land‑registry contracts and notarial records.
• [DISPUTED] The central cadastral database remained intact and was not accessed by the attackers.
• [● 7 SOURCES] Approximately 94,000 requests were pending at the time of the incident.
• [● 7 SOURCES] Access to the application was expanded on August 12 to include authorized cadastral workers, technical-judicial experts, and bailiffs.
• [● 6 SOURCES] The attack halted property transactions, froze mortgage approvals and prevented notaries from accessing records.
• [● 6 SOURCES] A ransomware attack on the National Cadastre and Real‑Estate Publicity Agency (ANCPI) began on 14 July 2026 and disabled its systems.
• [● 6 SOURCES] The government migrated the e‑Terra application to the Government Cloud and is conducting final security, functionality and performance tests.
• [● 6 SOURCES] On the first day of resumption, August 11, 2026, 24,695 requests were registered.
• [● 6 SOURCES] Payments in e-Terra can currently only be made via payment order or at the cashier, not by card.
• [● 5 SOURCES] A hacker using the alias ByteToBreach carried out a ransomware attack on Romania's cadastre system.
• [● 5 SOURCES] ANCPI confirmed the breach and is cooperating with the National Directorate for Cyber‑Security and KELA to restore services.
• [● 5 SOURCES] The e-Terra application has resumed activity to recover delays accumulated during its downtime.
• [● 5 SOURCES] Other ANCPI online platforms, such as Geoportal and MyEterra, will be restored in a subsequent phase.
• [● 4 SOURCES] Independent testing of the e‑Terra system was performed by STS, DNSC and Cyberint.
• [● 4 SOURCES] The testing has completed another evaluation round.
• [● 4 SOURCES] A limited number of technical issues remain to be corrected before the e‑Terra application can be made public.
• [● 4 SOURCES] Each correction will be validated through a new round of testing.
• [● 4 SOURCES] Testing is conducted in a controlled environment to avoid post‑release issues.
• [● 4 SOURCES] ANCPI and the Ministry of Development, Public Works and Administration have met with notaries and cadastral specialists to plan the resumption of e‑Terra operations.
• [● 4 SOURCES] The e‑Terra system will be reinstated once all tests and technical validations are successfully completed.
• [● 4 SOURCES] The government will issue a public update on the remediation status by Friday, 7 August 2026.
• [● 3 SOURCES] The disruption occurred shortly before a VAT increase on new homes effective 1 August 2026, affecting many buyers and developers.
• [● 3 SOURCES] The Romanian government refused to pay the ransom demanded by the hacker.
• [● 3 SOURCES] Dan Cimpean, director of the DNSC, said the attacker acts as an “initial‑access broker”.
• [● 2 SOURCES] ANCPI said its core databases were not destroyed and data had not been permanently lost.
• [● 2 SOURCES] The breach exploited outdated Windows XP servers and compromised credentials.
• [● 2 SOURCES] ANCPI allocated only 0.2 % of its budget to cyber‑defence before the attack.
• [● 2 SOURCES] The attack caused an estimated daily economic loss of €60.75 million.
• [● 2 SOURCES] The Romanian Senate passed a temporary exemption from the 1 % inheritance‑tax surcharge for cases impacted between 14 July and 30 September 2026.
• [○ 1 SOURCE] Romanian authorities confirmed on 16 July 2026 that the incident was a cyber attack.
• [○ 1 SOURCE] The National Penitentiary Administration suffered a ransomware attack on the night of 28‑29 July 2026, but essential prison operations continued.
• [○ 1 SOURCE] The prolonged cadastre outage created liquidity pressure on Romanian real‑estate agencies, with delayed transactions reported by RE/MAX.
• [○ 1 SOURCE] Latvia provided investigative assistance to Romania regarding the cadastre cyberattack.
• [○ 1 SOURCE] ANCPI spent a total of 68 million lei on system maintenance in recent years, including a 11.6 million‑lei contract for e‑Terra maintenance.
• [○ 1 SOURCE] The integrity of the cadastral and land registry records has been confirmed.

Timeline

1. about 1 month ago

   [TECHNOLOGY] 23 sources

   ANCPI e-Terra application resumes activity after cyberattack

   Romania's e-Terra cadastre application has resumed operations following a July 14 cyberattack. Access is being restored in stages to professionals, though a backlog of 94,000 requests remains.

2. about 2 months ago

   [TECHNOLOGY] 5 sources

   ANCPI plans to relaunch Romania's e-Terra cadastral system after technical fixes

   Romania's ANCPI says the e‑Terra cadastral system will reopen after independent testing by STS, DNSC and Cyberint corrects remaining technical issues; a public update is due by 7 Aug 2026.

3. about 2 months ago

   [TECHNOLOGY] 2 sources

   Romanian Land Registry e‑Terra System Disabled by Cyberattack

   Romania’s ANCPI e‑Terra system was knocked offline for 22 days due to weak passwords and unpatched software, while a global report finds cybercrime inflicts $10 k average losses per victim and up to $10.5 trn a

4. about 2 months ago

   [TECHNOLOGY] 3 sources

   Romania's ANCPI conducts new security tests on e‑Terra land registry system

   Romania's ANCPI says the e‑Terra land‑registry app, offline after a July cyberattack, is undergoing a new round of security, functionality and performance tests by STS, DNSC and Cyberint; the system will be re‑

5. about 2 months ago

   [TECHNOLOGY] 20 sources

   Romania's Cadastre Agency recovers after ransomware attack

   Romania's cadastre agency was hit by a ransomware attack on 14 July 2026, costing €60.75 million daily, prompting cloud migration, Senate tax relief, and nationwide cyber‑security measures.

6. about 2 months ago

   [BUSINESS] 14 sources

   Romania’s cadastral system hack freezes property market

   ByteToBreach ransomware attack on Romania’s cadastre system deleted files, stopped property deals and mortgages, and left the central database intact; the government refused ransom and recovery efforts areongo‑

7. about 2 months ago

   [TECHNOLOGY] 6 sources

   Romania's land registry crippled by cyber attack

   A hacker dubbed “ByteToBreach” breached ANCPI on 14 July 2026, deleting Romania’s e‑Terra property database and halting the real‑estate market; authorities say core data survive and are rebuilding the system.

8. 2 months ago

   [TECHNOLOGY] 2 sources

   Romanian land registry hack freezes property market

   Algerian‑linked hacker ByteToBreach erased Romania’s digital land‑registry on July 14, halting all property transactions and highlighting insufficient cyber‑security investment.

9. 2 months ago

   [BUSINESS] 14 sources

   Romania's land registry crippled by cyberattack, halting property market

   A ransomware‑style hack wiped Romania's land‑registry data, shutting ANCPI's online services for a week and halting property transactions ahead of a VAT increase, while authorities work to restore systems from

10. 2 months ago

    [TECHNOLOGY] 21 sources

    ANCPI cyberattack leaves cadastral services offline, data safe and recovery underway

    ANCPI’s cyberattack shut down cadastral services; databases remain intact via backups, restoration is ongoing, and the outage threatens reduced‑VAT home‑buyer benefits.

11. 2 months ago

    [TECHNOLOGY] 16 sources

    Romania's cadastre system e‑Terra crippled by massive cyberattack

    A major cyberattack disabled Romania's ANCPI e‑Terra system, halting real‑estate transactions and risking loss of reduced 9 % VAT for thousands of buyers; authorities investigate and a hacker claims data theft.

12. 2 months ago

    [POLITICS] 4 sources

    Romanian interim health minister says NRRP hospitals to be finished by August

    Romania's interim health minister Cseke Attila said five NRRP‑funded hospitals will be finished by August, two are in reception, and the Constanța emergency hospital will complete in spring after extra state‑c​

13. 3 months ago

    [HEALTH] 3 sources

    Romania's Health Ministry allocates 162.5 million lei to PNRR hospital upgrades

    Romania's Health Ministry has spent over 162.5 million lei on PNRR‑funded hospital upgrades and signed 35 contract amendments to extend and refine digital and infrastructure projects nationwide.

14. 3 months ago

    [POLITICS] 2 sources

    Romania's DNA completes €2.5 million PNRR digitalisation project

    Romania's National Anti‑Corruption Directorate has finished a €2.5 million PNRR‑funded digitalisation project, upgrading IT hardware and software to modernise operations and boost data exchange with the justice

15. 3 months ago

    [BUSINESS] 2 sources

    CFR Călători advances Romanian rail modernization with new locomotive and 42 upgraded carriages

    CFR Călători readied the modernised LEMA 006 locomotive and 42 upgraded passenger cars, part of a PNRR‑funded programme to modernise 139 Romanian rail vehicles.

16. 3 months ago

    [BUSINESS] 3 sources

    CFR Călători adds 19 modernized locomotives under EU‑funded PNRR program

    CFR Călători modernised 19 electric locomotives under the EU‑funded PNRR, spending €67 m on upgrades and €33 m on maintenance, boosting Romania's rail efficiency and heritage branding.

17. 3 months ago

    [BUSINESS] 23 sources

    Romania receives €2.25 billion EU grant under PNRR

    Romania got €2.25 billion from the EU as the fourth PNRR payment, covering reforms in health, pensions, digitalisation and infrastructure, raising total receipts to over 60 % of its allocation.

Sources

adevarul.ro · adginforma.it · agerpres.ro · alba24.ro · arenait.net · b2b-cyber-security.de · baskenthaber.com.tr · bihon.ro · bistriteanul.ro · bizbrasov.ro · braunschweiger-zeitung.de · business-punk.com · businessmag.al · capitalul.ro · castillosenaragon.es · curier.ro · cursdeguvernare.ro · cuvantul-liber.ro · cvlpress.ro · cybersecurity360.it · dcnews.ro · defapt.ro · desteptarea.ro · doctorulzilei.ro · donne.notizie.it · drweb.de · economedia.ro · economica.net · erdelyinaplo.ro · europafm.ro · evenimentsibiu.ro · financiarul.ro · flux24.ro · forbes.ro · g7.hu · gadoo.com.br · gandul.info · gazetadebistrita.ro · gazetaoltului.ro · gddhd.ro · go4it.ro · hartaportal.hu · harzkurier.de · hencse.hu · hotnews.ro · hvg.hu · igj.ro · impactpress.ro