Moldova's prime minister says a state actor is suspected in cyberattacks that extracted data in about 750,000 cases

L2Who’s affected

Who's affected: "Preliminary data show that, in around 750,000 cases, the attackers extracted information" (MOLDPRES). Tofan clarified: "This does not mean that 750,000 accounts were hacked. It means that, in 750,000 cases, at least one data element" was extracted (MOLDPRES). Per STISC, as reported by MOLDPRES, targeted data covered "social benefits, pensions, disability, driving licenses, photographs, vehicles and companies owned or managed. Financial information, including IBAN codes, tax debts and payment history through MPay." "Institutional representatives say that bank card information was not affected" (MOLDPRES).

L3Why it’s quiet

Why it stayed quiet: Analysis: the breach surfaced in the final days before the U.S. midterms, and Moldova gets little U.S. coverage outside its elections.

L4Deeper impact

Deeper impact: "On October 23, the authorities stopped the unauthorized extraction of data and ordered an assessment of 82 important digital services. Of these, 30 were disconnected," and "further attack attempts took place on October 25 and 27 and were detected and blocked" (MOLDPRES). Officials said, according to MOLDPRES, "the main risk for citizens in the coming period is the use of the extracted data in social engineering attempts," and that "the use of artificial intelligence allegedly facilitated their identification and exploitation" of vulnerabilities. "Tofan also announced the accelerated establishment of a national cybersecurity center, known as a SOC, which will operate within the ASC" (MOLDPRES).

L5Full context

Full context: Cybersecurity Agency head Mihai Lupascu told RFE/RL that "without a doubt, this is the most impactful...largest cyberattack recorded so far." "Moldovan President Maia Sandu has called a meeting of the country's National Security Council (CNS)" (RFE/RL). Moldova, "The country of approximately 2.4 million people, which borders Ukraine and Romania," "has faced repeated cyberattacks and influence operations since Russia launched its full-scale invasion of Ukraine in 2022" (The Record).

You’ve reached the bottom. Read the original reporting below.