Moldova Probes Possible Foreign Role in Government Data Breach Affecting 750,000 ID Numbers

Moldova's prime minister, Vasile Tofan, said authorities are examining whether foreign state actors were involved in a major cyberattack on government systems. He described it as part of coordinated, large-scale attacks rather than an isolated incident. No country or hacking group has been publicly blamed.

Moldova's Electronic Governance Agency said attackers exploited vulnerabilities between October 19 and 23, making about 11 million requests for data through government services. Information linked to about 750,000 identification numbers was extracted, though not everyone had all data types exposed. The data may include names, dates of birth, family relationships, health insurance status, pensions, disability records, driver's licences, photographs and vehicle ownership. Financial details such as bank account numbers and tax debts may also have been accessed. Bank card information was not compromised, and there is no evidence official records were altered.

According to the agency, the attackers abused services that did not require authentication, then used what they gained to pull more data from interconnected systems. In response, authorities inspected 82 public digital services and temporarily disconnected those considered vulnerable, plus more than 30 information systems and administrative panels. Local media reported disruption to services such as construction permit applications, veterinary transport authorisations, medicine imports and food safety registrations.