Before the Prosecutor’s Office announced the case, President Maia Sandu had convened the National Security Council to assess the incident, after the Electronic Governance Agency reported the unauthorized extraction of data associated with approximately 750,000 IDNPs. In parallel, the authorities said that the stolen data could not be used directly for criminal purposes, but that scammers could contact citizens pretending to be employees of banks, customs, or other institutions, using information already known from the breach.
The attack was described as having taken place between October 19 and 23, with extraction attempts targeting approximately one million IDNPs. The authorities preventively suspended services and systems considered exposed, and access was stopped on October 23 at 11:30; subsequently, new access attempts were blocked (October 25 and 27). In addition, 82 digital services were checked.
In the following days, several public platforms remained unavailable after new forced-access attempts, detected during the night of October 22–23 and subsequently resumed; on October 26, the authorities preventively disconnected some systems, while approximately 15 specialists monitored and worked on securing them. At the same time, Igor Grosu requested the verification of all information systems, including the one used at Chișinău International Airport “Eugen Doga,” specifying that the fact that the airport’s system is not connected to the internet does not eliminate the risks.
