Cyber agency: hacker who breached CSDD database likely also targeted other state systems
Latvia's cyber incident response agency Cert.lv has concluded that the hacker who accessed the Road Traffic Safety Directorate's (CSDD) database likely also attempted to breach other state institutions' systems. The assessment is based on the methods used and the timing of the attack.
Latvia's cyber incident response authority Cert.lv has determined, based on its analysis of activity in cyberspace, that the person who gained access to the database of the Road Traffic Safety Directorate (CSDD) most likely also attempted to infiltrate other state institutions' information systems.
The agency reached this conclusion after evaluating the methods used in the attack as well as the timing of the incident. The findings were reported by Latvian Television's programme "De facto".
What is known so far
The breach of the CSDD system and the resulting unauthorized access to its database had already raised concerns about the cybersecurity of state institutions. Cert.lv, the body responsible for identifying and preventing cyber incidents in both the public and private sectors, continues to assess the scale of the incident and its possible consequences.
No detailed information has yet been made public about which other systems may have been targeted by the attacker. However, analysis of the methods used and the timing of the attack suggests the incident may not have been an isolated case directed solely at CSDD.
