CSDD cyberattack fallout: KNAB considers changing car license plates

Latvia's Road Traffic Safety Directorate (CSDD) has revealed a significantly larger cyberattack than initially known, compromising sensitive data from over a million individuals and hundreds of thousands of businesses. The breach, which occurred between August 8 and 10, saw attackers gain access to information from CSDD payment receipts dating back to 2008.

The exposed data includes personal identification codes, company registration numbers, names, payment details, vehicle registration plates, and addresses listed on vehicle registration certificates. CSDD has emphasized that customer phone numbers and email addresses were not affected by the incident.

In response to the breach, the Corruption Prevention and Combating Bureau (KNAB) is contemplating a precautionary measure: changing the license plates on its official vehicles. KNAB stated it is aware of the cyberattack through public information and, to mitigate potential risks concerning its own fleet, is considering this step.

The scale of the attack underscores the persistent cybersecurity challenges faced by public institutions. While CSDD has assured that certain contact information was not compromised, the breadth of personal and vehicle-related data leaked raises concerns about potential misuse and identity theft.

“

Taking into account that KNAB does not have information on whether data on vehicles actually in KNAB's possession has been leaked, and to exclude possible risks, KNAB is considering the possibility of changing the state registration number plates for the relevant vehicles.