CSDD: Cyberattack Exposed Payment Receipt Data, but Not Bank Details
Latvia's Road Traffic Safety Directorate (CSDD) has clarified which customer data was and was not affected by a cyberattack on its IT system in early August. Attackers did not gain access to phone numbers, email addresses or banking data.
The Road Traffic Safety Directorate (CSDD) has provided further details about a sophisticated cyberattack that hit its information technology system in early August. The agency has summarized which specific customer data was accessed by the attackers and which was not.
What happened
During the attack, malicious actors gained unauthorized access to data contained in CSDD's information systems that was linked to customer payment receipts. This data included some personal information belonging to clients.
What was not affected
CSDD confirmed that the attackers did not obtain several categories of sensitive data. Specifically, customers' phone numbers, email addresses and banking details were not accessed. This means information related to payments and direct communication remained unavailable to the attackers.
CSDD continues to inform the public about the consequences of the cyberattack, clarifying the scope of affected and unaffected data so that customers can assess potential risks.
