Authorities in the Republic of Moldova thwarted an attack involving 11 million requests to access personal data

Several digital public services in the Republic of Moldova were targeted in a large-scale cyberattack during the night of October 22. The systems recorded approximately 11 million access requests and suspicious database queries, apparently aimed at illegally obtaining citizens’ personal data. The attack was stopped the following day, and some government platforms may operate with difficulty or may be temporarily unavailable.

The incident was announced on Saturday, October 24, by the Electronic Governance Agency, the Information Technology and Cybersecurity Service, and the Cybersecurity Agency. After detecting the unusual activity, the authorities proactively disconnected the targeted services to block unauthorized access and began security checks.

So far, the institutions have not specified whether the attackers managed to extract personal data, which platforms were targeted, or who may be behind the attack. The police and the National Center for Personal Data Protection were notified, and the investigation is ongoing.

The authorities warn that the incident may be followed by fraud attempts. Criminals could pose as employees of public institutions or banks and might use victims’ names or IDNP numbers to gain their trust. Citizens are urged not to share passwords, authentication codes, or other confidential information and not to authorize transactions requested by unknown individuals over the phone or via messages.