Following a series of hacking attacks on Moldova’s state digital services, the perpetrators may have gained access to personal data linked to around 750,000 personal identification numbers.
The Agency for Electronic Governance reported this after a preliminary investigation, Newsmaker writes.
According to the agency, between 19 and 23 October hackers attempted to steal information relating to almost one million identification numbers. The data to which the attackers may have gained unauthorised access include first and last names, dates and places of birth, information about relatives, health insurance, pensions, disability status, driving licences, ownership of cars or companies, as well as photographs and financial data, including IBANs and tax history.
At the same time, the Agency stresses that the full set of information was not exposed for every personal code, and bank card data were not affected at all, as state platforms do not store them.
After the threat was identified, specialists checked 82 digital services and temporarily shut down more than 30 information systems. The first attack was stopped on 23 October, but on 25 and 27 October hackers made new attempts to leak data, which specialists successfully blocked. According to preliminary information, the perpetrators exploited vulnerabilities in certain services that were operating without authorisation. The hackers were unable to make changes to state registers.
Law enforcement and cyber specialists are restoring the systems after repeat security checks — most services are already available to citizens again. The authorities are urging residents to remain vigilant because of possible fraud, not to disclose passwords or SMS codes, and to verify any suspicious calls or messages supposedly from banks or relatives.