CyberNew CyberNew
Data Breaches & Leaks The Record 1 month ago

Latvian officials resign after cyberattack exposes data on 1.2 million people

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: HIGH
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Data Breaches & Leaks

Analyst Takeaway

"Latvia's Road Traffic Safety Directorate, which handles vehicle registration and driver's licenses, announced a significant data breach affecting its systems. Credit: Maris Greidans / Flickr Latvian officials resign after cyberattack exposes data on 1.2 million people Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in a..."

Recommended Defense & Mitigation

  • Access Review: Audit administrative roles, enforce phishing-resistant MFA, and review privilege escalations.
  • Credential Rotation: Rotate high-privilege service credentials and tokens associated with impacted services.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Riga traffic
Latvia's Road Traffic Safety Directorate, which handles vehicle registration and driver's licenses, announced a significant data breach affecting its systems. Credit: Maris Greidans / Flickr

Latvian officials resign after cyberattack exposes data on 1.2 million people

Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in a major cyberattack that has prompted calls for senior officials to resign.

The Road Traffic Safety Directorate, known as CSDD, said Tuesday that its investigation found hackers had accessed data from payment receipts dating back to 2008. The breach affected records belonging to more than 1.2 million people and 200,000 businesses and other legal entities. Latvia has a population of just over 1.8 million.

CSDD is the state agency responsible for vehicle registration, driver’s licenses and other road safety services and operates under Latvia’s Transport Ministry.

The stolen information includes personal identification numbers or company registration numbers, vehicle license plate numbers, payment amounts and dates, as well as addresses listed on vehicle registration certificates.

CSDD said customer phone numbers and email addresses were not affected and that address information was incomplete in some records. Usernames and passwords were also not compromised.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →