Moldova opens criminal probe after major government data breach
Chisinau prosecutors have opened a criminal investigation into the unauthorized extraction of personal data linked to about 750,000 Moldovan identification numbers during cyberattacks on government systems in October.
Investigation launched into alleged privacy violations
The Chisinau Municipal Prosecutor's Office said the investigation concerns suspected offences involving violations of privacy and the disclosure of information from a criminal investigation.
“Procedural actions are ongoing. We will inform the public about developments in the case insofar as permitted by law,” the Prosecutor's Office said.
Government systems targeted in October cyberattacks
Several of Moldova's government information systems were targeted by cyberattacks between October 19 and 23. The attackers made approximately 11 million requests to access digital public services in an attempt to obtain citizens' personal information.
According to preliminary findings, the attackers queried approximately one million personal identification numbers (IDNPs), successfully extracting data associated with around 750,000 of them.
The compromised information includes names, identification numbers, family-related details, pension records, driver's licence information and certain financial data.
Authorities assess security vulnerabilities
The E-Governance Agency (AGE) ordered security assessments of 82 digital services and temporarily suspended applications considered vulnerable.
Authorities said the unauthorized data extraction was stopped on October 23. However, further attempts to gain unauthorized access were detected in the following days.
Investigations have found no unauthorized changes to state registers, while bank card data has not been compromised. Authorities have also announced that individuals whose personal information was exposed will be notified.
Changes in digital governance following the breach
On October 28, E-Governance Agency Director Nicoleta Colomeeț left her post following the cyberattacks. Artiom Cociu was appointed acting head of the agency.
Prime Minister Vasile Tofan said the incident highlighted the need to change how public digital services are coordinated and managed.
The authorities are preparing additional measures to strengthen cybersecurity, improve coordination between responsible institutions and establish a national cybersecurity centre.
Translation by Iurie Tataru
RELATED COVERAGE
- Cyberattack on Moldova's digital services: 11 million requests for citizens' data
- New cyberattack hits Government services; Platforms will remain offline on Monday
- Over 700 IP addresses were involved in the cyberattack
- Data leaks could enable manipulation, but not direct account theft, Minister Claudiu Năsui
- Maia Sandu convenes National Security Council after major cyberattack on Moldova
