Moldova attack reached beyond public services into government data
Moldova’s Electronic Governance Agency said attackers exploited government service vulnerabilities from October 19 to 23, making about 11 million requests and extracting information linked to roughly 750,000 identification numbers. Authorities temporarily disconnected 82 public services and more than 30 government systems and administrative panels; most affected services have since been secured and are being restored gradually.
The entry points did not require users to log in. Attackers used them to request data from connected government systems, so a flaw in one public-facing service exposed records held elsewhere. Potentially accessed information includes benefits, health insurance and identity details, though not every affected person had every category exposed. Officials are investigating possible foreign involvement, but Moldova has not attributed the attack.
For agencies whose public portals query shared identity or benefits systems, the exposure can extend beyond the portal itself. Disconnecting services does not establish that already extracted data—or every connected system—is contained.
Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports.