< Back to situations

Get alerts on this situation

We’ll email you as it develops, and you can follow the whole thread from day one.

Unsubscribe anytime.

[SITUATION] · [ACTIVE]

11 clusters · 71 sources · 33 days · First seen about 1 month ago · Last updated 1 day ago

Categories: BUSINESS · TECHNOLOGY · POLITICS · HEALTH

Romania PNRR rollout and cadastral cyberattack

Entities: Romanian Government · ByteToBreach · National Agency for Cadastre and Real Estate Registration (ANCPI)

Overview

In late June 2026 the EU released the fourth €2.251 billion tranche of Romania’s PNRR, bringing total receipts to about €13 billion for reforms in health, pensions, digital administration, forest management, decarbonisation and infrastructure. Key projects include modernising 19 electric locomotives, digitising the anti‑corruption directorate’s case‑management platform and completing five PNRR‑funded hospitals by August.

A large‑scale cyber‑attack on the National Agency for Cadastre and Land Registration (ANCPI) began on 14 July 2026, crippling the e‑Terra/e‑Property platform and halting notarial, mortgage and land‑registry services. The attacker, using the alias “ByteToBreach”, demanded ransom, claimed to have erased system backups, and later deleted the central land‑registry database and source code. Authorities confirmed that core legal databases remained intact and no permanent data loss occurred; the breach exploited outdated Windows XP servers and compromised credentials. By 19 July the outage persisted, freezing thousands of property transactions just before a VAT increase on new homes (from 9 % to 21 % on 1 August) and a scheduled tax rise on 31 July.

Recovery, coordinated by the Special Telecommunications Service and cybersecurity specialists, involves migrating ANCPI applications to the Romanian government cloud, conducting integrity checks and rebuilding infrastructure. The migration was expected to finish mid‑week following the 23 July identification of ByteToBreach (allegedly operating from Algeria). The government stresses data‑integrity protection, while the low cybersecurity budget—€305 000 out of €135 million spent on cadastre digitisation—had been previously flagged.

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[● 3 SOURCES] A cyber attack on 14 July 2026 disabled the ANCPI e‑Property registration system in Romania. (f279dac6-0ab3-4103-ae4a-a65308a1c449, 6584f396-8088-45d1-ab92-2b8d4bc2a71e, c0e6b1aa-1253-4a3f-b631-162c3385456c)
[○ 1 SOURCE] The outage prevented notaries from issuing ownership certificates, registering mortgages and finalising sales contracts. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
[○ 1 SOURCE] A hacker using the alias “ByteToBreach” claimed to have demanded payment to avoid publishing stolen data and said they deleted backups. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
[○ 1 SOURCE] ANCPI said its core databases were not destroyed and data had not been permanently lost. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
[○ 1 SOURCE] The breach exploited outdated Windows XP servers and compromised credentials. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
[○ 1 SOURCE] The disruption occurred shortly before a VAT increase on new homes effective 1 August 2026, affecting many buyers and developers. (f279dac6-0ab3-4103-ae4a-a65308a1c449)
[○ 1 SOURCE] The government is rebuilding the infrastructure, migrating applications to a government cloud, and verifying data integrity. (f279dac6-0ab3-4103-ae4a-a65308a1c449)

Timeline

1 day ago

[BUSINESS] 3 sources
Romanian Land Registry Cyberattack Halts Real Estate Transactions
A cyber attack on Romania’s land‑registry agency on 14 July 2026 disabled the e‑Property system, halting property transactions just before a VAT hike, with the hacker “ByteToBreach” claiming extortion.
4 days ago

[TECHNOLOGY] 2 sources
Romanian land registry hack freezes property market
Algerian‑linked hacker ByteToBreach erased Romania’s digital land‑registry on July 14, halting all property transactions and highlighting insufficient cyber‑security investment.
7 days ago

[BUSINESS] 14 sources
Romania's land registry crippled by cyberattack, halting property market
A ransomware‑style hack wiped Romania's land‑registry data, shutting ANCPI's online services for a week and halting property transactions ahead of a VAT increase, while authorities work to restore systems from
8 days ago

[TECHNOLOGY] 21 sources
ANCPI cyberattack leaves cadastral services offline, data safe and recovery underway
ANCPI’s cyberattack shut down cadastral services; databases remain intact via backups, restoration is ongoing, and the outage threatens reduced‑VAT home‑buyer benefits.
12 days ago

[TECHNOLOGY] 16 sources
Romania's cadastre system e‑Terra crippled by massive cyberattack
A major cyberattack disabled Romania's ANCPI e‑Terra system, halting real‑estate transactions and risking loss of reduced 9 % VAT for thousands of buyers; authorities investigate and a hacker claims data theft.
14 days ago

[POLITICS] 4 sources
Romanian interim health minister says NRRP hospitals to be finished by August
Romania's interim health minister Cseke Attila said five NRRP‑funded hospitals will be finished by August, two are in reception, and the Constanța emergency hospital will complete in spring after extra state‑c
17 days ago

[HEALTH] 3 sources
Romania's Health Ministry allocates 162.5 million lei to PNRR hospital upgrades
Romania's Health Ministry has spent over 162.5 million lei on PNRR‑funded hospital upgrades and signed 35 contract amendments to extend and refine digital and infrastructure projects nationwide.
26 days ago

[POLITICS] 2 sources
Romania's DNA completes €2.5 million PNRR digitalisation project
Romania's National Anti‑Corruption Directorate has finished a €2.5 million PNRR‑funded digitalisation project, upgrading IT hardware and software to modernise operations and boost data exchange with the justice
28 days ago

[BUSINESS] 2 sources
CFR Călători advances Romanian rail modernization with new locomotive and 42 upgraded carriages
CFR Călători readied the modernised LEMA 006 locomotive and 42 upgraded passenger cars, part of a PNRR‑funded programme to modernise 139 Romanian rail vehicles.
about 1 month ago

[BUSINESS] 3 sources
CFR Călători adds 19 modernized locomotives under EU‑funded PNRR program
CFR Călători modernised 19 electric locomotives under the EU‑funded PNRR, spending €67 m on upgrades and €33 m on maintenance, boosting Romania's rail efficiency and heritage branding.
about 1 month ago

[BUSINESS] 23 sources
Romania receives €2.25 billion EU grant under PNRR
Romania got €2.25 billion from the EU as the fourth PNRR payment, covering reforms in health, pensions, digitalisation and infrastructure, raising total receipts to over 60 % of its allocation.

Sources

agerpres.ro · arenait.net · baskenthaber.com.tr · bihon.ro · bistriteanul.ro · bizbrasov.ro · braunschweiger-zeitung.de · business-punk.com · businessmag.al · castillosenaragon.es · curier.ro · cursdeguvernare.ro · dcnews.ro · defapt.ro · doctorulzilei.ro · drweb.de · economedia.ro · economica.net · europafm.ro · financiarul.ro · flux24.ro · forbes.ro · g7.hu · gadoo.com.br · gazetaoltului.ro · gddhd.ro · hartaportal.hu · harzkurier.de · hvg.hu · igj.ro · impactpress.ro · incomemagazine.ro · it-daily.net · kreiszeitung.de · libertatea.ro · makemusic.smpb.ch · mediafax.ro · mobil.abendblatt.de · money.ro · monitorulbt.ro · monitorulneamt.ro · ms.ro · national.ro · news.co.za · news.yam.md · newsbucuresti.ro · newsweek.ro · obiectiv.info

This summary has been updated 1 time: see revision history