"De facto": CSDD hacker likely tried to access other state systems too
Following a major data breach at Latvia's Road Traffic Safety Directorate (CSDD), in which data of about 1.2 million individuals and 200,000 legal entities was stolen, the LTV programme "De facto" reports the attacker likely also tried to breach other state systems. The incident exposes serious gaps in state cybersecurity.
A cyberattack on Latvia's Road Traffic Safety Directorate (CSDD) has resulted in one of the largest known personal data breaches in the country, with data belonging to roughly 1.2 million individuals and about 200,000 legal entities stolen.
According to the Latvian Television programme "De facto", which reported on the matter on Sunday, evidence suggests the attacker did not limit the intrusion to CSDD's systems alone — they likely also attempted to gain access to other state institutions' information systems.
Gaps in cybersecurity
The information presented in the programme points to serious shortcomings in the cybersecurity of state institutions, with systems holding large volumes of sensitive data on residents and businesses proving vulnerable to a targeted attack.
The full details of the incident, and the extent to which the attacker actually managed to penetrate other systems, have not yet been fully disclosed to the public.
