Breaches · 5h ago
Moldova’s Electronic Governance Agency said attackers exploited government service vulnerabilities from October 19 to 23, making about 11 million requests and extracting information linked to roughly 750,000 identification numbers. Authorities temporarily disconnected 82 public services and more than 30 government systems and administrative panels; most affected services have since been secured and are being restored gradually.
The entry points did not require users to log in. Attackers used them to request data from connected government systems, so a flaw in one public-facing service exposed records held elsewhere. Potentially accessed information includes benefits, health insurance and identity details, though not every affected person had every category exposed. Officials are investigating possible foreign involvement, but Moldova has not attributed the attack.
For agencies whose public portals query shared identity or benefits systems, the exposure can extend beyond the portal itself. Disconnecting services does not establish that already extracted data—or every connected system—is contained.
2 sources covering this story
The Record from Recorded Future
Moldova investigates possible foreign involvement in major government cyberattack
Prime Minister Vasile Tofan said the incident may be part of a broader campaign targeting both citizens' personal data and government digital infrastructure, according to local media reports.
Risky Bulletin: Moldovan public services crippled by cyberattack
Moldova takes down more than 80 public services after a cyberattack, the White House launches a new cybersecurity pilot program, South Kor [Read More
Part of the PlainSec briefing for 2026-10-28