Foreign Ransomware Group Claims Responsibility for Cyberattack on LVM
Cert.lv continues investigating the cyber incident at LVM, attributed to a foreign financially motivated ransomware group that leaked stolen data.
/nginx/o/2026/06/26/17743644t1h13a4.jpg)
Cert.lv is still providing support to Latvijas Valsts meži (LVM) following a cybersecurity incident that affected the company's infrastructure. Experts are analyzing the leaked data to assess potential additional damage. LVM and all third parties that may be at risk have been notified and provided with recommendations for immediate and preventive actions.
The responsibility for the attack has been claimed by a foreign ransomware group operating for financial gain. This group has previously targeted companies and state institutions in other countries, including NATO and European Union member states. Cert.lv has also informed international partners about the progress of the incident analysis.


