Moldova’s Electronic Governance Agency: A cyberattack targeted one million IDNPs, and the data of 750,000 people was allegedly extracted

The Electronic Governance Agency of the Republic of Moldova is investigating a cyberattack on government systems that took place between October 19 and 23. Approximately one million IDNPs were queried in attempts to extract data without authorization, while information associated with around 750,000 people may have been extracted.

The incident was announced on October 24. The authorities checked 82 digital services and temporarily suspended the services and systems exposed to risk. Data extraction was stopped on October 23 at 11:30 a.m. Further attempts to force access were blocked on October 25, while additional unsuccessful attempts were detected on October 27.

The targeted data may include names, dates of birth, family information, insured status, social benefits, driving licenses, vehicles, companies, IBANs, and payment histories. The authorities state that bank card information was not affected and that no changes to state registers have been identified.

The investigation is being conducted by the EGA, ASC, STISC, SIS, and other competent institutions. Citizens are urged not to disclose passwords or codes, to avoid suspicious links, and to directly verify any unusual request.