Large-scale data theft at the Latvian Road Traffic Authority: 1.4 million people affected

Riga. In Latvia, a large-scale theft of payment receipt records from the road traffic authority CSDD is causing a stir and security concerns. According to the authority, the data of 1.2 million private individuals and 200,000 companies were stolen in a hacker attack. In the previous week, unknown persons stole data such as names, surnames, payment details, vehicle license plates and the address registered on the day the service was provided. Latvia has around 1.9 million inhabitants. It initially remained unclear who was behind the incident. According to the Leta agency, Prime Minister Andris Kulbergs said that it cannot be ruled out that it was a cyber attack on Latvia from another country. The Latvian Cybersecurity Authority and CSDD warned in a statement about the risk that the stolen data could be misused by fraudsters. Kulbergs ordered an investigation into the incident and criticized the CSDD leadership for delaying notification of the data theft. “I have to say that I am unpleasantly surprised by a certain IT security infantilism that prevails in some supervisory authorities and state institutions,” said the Prime Minister, also referring to a hacker attack on the state forestry administration in June.