Minister Valainis orders Tet to deliver detailed report on CSDD cyberattack by end of week

Economy Minister Viktors Valainis met on Wednesday with representatives of Tet's supervisory board and management, along with officials from state asset manager Possessor, to hear an update on the cyberattack affecting the Road Traffic Safety Directorate (CSDD). Following the meeting, Valainis ordered Tet to immediately carry out an audit and to provide, by the end of this week, a complete, fact-based account of what happened — including identifying where and at what level responsibility lies for the circumstances that allowed the attack to occur.

Valainis stressed that the most important task right now is establishing an accurate picture of events: what happened, why it was possible, and who bears responsibility. Only once the facts are fully established, he said, can decisions be made about further action. The minister added that incidents affecting state-critical information systems require not only swift remediation but also clear accountability and conclusions to prevent similar incidents in the future.

Tet acknowledges a targeted attack

Before the meeting with the minister, Tet had announced it had launched an investigation to determine the precise circumstances of the incident and had already made security improvements. Tet board chairman Uldis Tatarčuks said that, based on initial indications, the attack appeared to have been highly targeted and professional, adding that a full assessment would only be possible after in-depth technical analysis.

The company said it has connected all available systems and network traffic to a SIEM monitoring solution, refined its security monitoring thresholds, and carried out deeper analysis of system logs. These measures have already yielded results — in recent days several new malicious activities were detected and addressed in time.

Tet said it continues close cooperation with CSDD, CERT.LV and other involved parties, while acknowledging that CSDD's current priority is supporting its own customers and managing challenges tied to a change in its leadership. The company urged citizens and organizations to stay vigilant about cybersecurity — using strong, unique passwords, enabling multi-factor authentication, and being cautious of suspicious emails and links.