< Back to situation

[REVISION HISTORY]

Romania PNRR implementation and ANCPI cyberattack

Updated 17 times since CLSTR started tracking revisions of this situation.

What changed

2026-08-11 16:05 UTC → 2026-08-12 12:17 UTC · added removed

Romania has utilized significant tranches of the European Union’s National Recovery and Resilience Plan (PNRR) to fund various modernization projects. These include projects, including upgrading the national railway fleet through CFR Călători, fleet, digitalizing the National Anti-Corruption Directorate (DNA), and modernizing hospital infrastructure and medical services. infrastructure. However, the implementation of these digital and administrative goals faced a major setback in July 2026 when the National Agency for Cadastre and Real Estate Publicity (ANCPI) was targeted by a massive ransomware attack. Attributed to a hacker known as ‘ByteToBreach’, the breach involved the use of compromised credentials and outdated servers, leading to the deletion of digital land-registry databases and the suspension of the e-Terra platform. The This outage paralyzed the Romanian real-estate market, preventing notaries from certifying sales and banks from processing mortgages, particularly as mortgages. Following the disruption coincided with a scheduled VAT increase on residential properties. To recover, attack, the government agency migrated the agency’s its applications to a government-run cloud. Following extensive security testing and audits by In early August, specialists from the Special Telecommunications Service (STS) and (STS), the National Cybersecurity Directorate (DNSC), the agency began preparing to restart and the platform in stages firm Cyberint conducted security, functionality, and performance evaluations to process a large backlog remedy identified vulnerabilities. To prevent future incidents, ANCPI planned an investment of pending requests. approximately €5 million in new IT-security infrastructure. As of August 11, 2026, the e-Terra application has commenced a phased restart. Initial access is restricted to ANCPI staff, cadastre office personnel, and public notaries to prioritize the processing of documents and deeds received approximately 94,000 pending requests accumulated during the downtime. Starting outage. On August 12, access will expand expanded to include authorized surveyors, judicial technical experts, and bailiffs. While e-Terra is functional, other platforms like Geoportal and MyEterra remain offline. Authorities have confirmed the integrity of cadastral records and stated records, stating there is ‘no evidence of data theft’. To mitigate the impact, legal deadlines for approximately 94,000 pending requests have been extended, and the validity of existing land registry extracts has been automatically prolonged. Currently, users must use payment orders or cashiers, as card payments are unavailable.

Versions

  1. 2026-08-12 12:17 UTC Romania PNRR implementation and ANCPI cyberattack
  2. 2026-08-11 16:05 UTC Romania PNRR implementation and ANCPI cyberattack
  3. 2026-08-11 12:06 UTC Romania PNRR implementation and ANCPI cyberattack
  4. 2026-08-10 06:15 UTC CNAIR announces new road infrastructure and safety measures
  5. 2026-08-09 06:25 UTC Romania PNRR rollout & ANCPI ransomware fallout
  6. 2026-08-06 07:03 UTC Romania PNRR rollout & ANCPI ransomware fallout
  7. 2026-08-05 22:22 UTC Romania PNRR rollout & ANCPI ransomware recovery
  8. 2026-08-04 10:27 UTC Romania PNRR rollout & ANCPI ransomware recovery
  9. 2026-07-31 12:06 UTC Romania PNRR rollout & ANCPI ransomware recovery
  10. 2026-07-31 07:16 UTC Romania PNRR rollout & ANCPI ransomware fallout
  11. 2026-07-30 09:57 UTC Romania PNRR rollout and ANCPI ransomware fallout
  12. 2026-07-29 20:24 UTC Romania PNRR rollout and ANCPI ransomware attack
  13. 2026-07-29 18:58 UTC Romania PNRR rollout and ANCPI ransomware attack
  14. 2026-07-28 20:00 UTC Romania PNRR rollout and ANCPI ransomware attack
  15. 2026-07-27 13:18 UTC Romania PNRR rollout and ANCPI ransomware attack
  16. 2026-07-27 06:55 UTC Romania PNRR rollout and land registry cyberattack
  17. 2026-07-26 23:21 UTC Romania PNRR rollout and cadastral cyberattack
  18. 2026-07-26 11:12 UTC Romania PNRR rollout and cadastral cyberattack

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.