Lawyer Warns of Risks After 600,000 Real Estate Registry Records Leaked

The recent data leak affecting approximately 600,000 real estate registry records is a serious breach that demands immediate attention and accountability. As reported by Delfi, the primary responsibility for data security rests with the data controller, which in this case is the Real Estate Cadastre (Registrų centras). This institution is entrusted with managing sensitive information, and any compromise reflects systemic failures in their security protocols.

“

Information is still very scarce for us to understand what happened. In normal cases, it is a systematic action that was performed, but in any case, the beginning is always with the data controller – the institution or organization that processes the data, is responsible for data security, and is responsible for who is granted access to the data.

Lawyers and experts are highlighting that the investigation must scrutinize the measures employed by the Registrų centras. This includes examining how user identification was handled, the adequacy of security protocols, and whether potential threats were properly assessed. The incident raises critical questions about the robustness of the systems in place to protect personal data, especially when third-party access or integrations are involved.

“

If we are talking about compromised internal employee logins, that is one question. If we are talking about third parties, then the aspect remains that if we grant access, and through a third party there are probably some integrations, then any outcomes are looked at in the primary organization: what security measures were applied, were they sufficient. And responsibility primarily starts to move from this part.

Furthermore, the response following the incident is crucial. The Registrų centras has stated that it has taken immediate steps to block suspicious accounts and enhance security measures. However, the public needs assurance that these actions are sufficient and that a thorough review of the breach's origins and impact will be conducted. Citizens whose data may have been compromised will be able to check this starting next week, a process that should be transparent and accessible.

“

Therefore, the primary responsibility always remains with the organization. Another question is how the organization managed access to the resources for which it is responsible – registries, systems, and similar sources where data is stored.