1.2 Million Personal Data Records Stolen in Latvian Cyberattack

Latvia is grappling with a massive data breach, with approximately 1.2 million individuals' personal information stolen over the past 18 years. The compromised data originated from payment records made to the CSDD, the country's directorate for road traffic safety.

“

We are not ruling out that it was a cyberattack carried out from another country against Latvia.

Prime Minister Andris Kulbergs expressed dismay over the incident, stating that the possibility of a state-sponsored cyberattack against Latvia from another country is not being ruled out. He criticized the CSDD's leadership for the delayed notification of the data theft, highlighting what he termed "IT security infantilism" prevalent in some regulatory bodies and government agencies.

“

I have to say that I am unpleasantly surprised by a certain IT security infantilism that prevails in some regulatory institutions and government agencies.

This breach follows a previous cyberattack on the state forest administration in June, raising serious concerns about national security. The two significant cyber incidents within a short period signal a critical need for enhanced security measures across government institutions. The Latvian cyber security authority and CSDD have warned the public about the potential misuse of the stolen data by fraudsters.

“

Two 'serious cyber incidents' in a short period are a clear signal that additional security measures must be taken.

With Latvia's population around 1.9 million, the scale of this data theft is substantial, impacting a significant portion of the country's residents. The investigation into the incident is ongoing, with a focus on identifying the perpetrators and understanding the full extent of the breach.

“

We are now literally talking about national security.