Large-scale data theft at the Latvian transport authority CSDD

In Latvia, a large-scale theft of records from payment receipts at the national road traffic and traffic safety authority CSDD is causing a stir. According to the authority and the Institute for Cybersecurity Prevention CERT.LV, the data of 1.2 million private individuals and 200,000 companies were stolen in a hacker attack.

According to the information, unknown persons obtained personal data from the period from 2008 onwards between August 8th and 10th. Full names, payment details, license plates and the postal addresses registered on the day the service was provided were lost.

According to the statement, contact details such as telephone numbers and email addresses were “not affected”. The services of the traffic safety authority CSDD are also not affected, it is said.

Safety concerns for those affected

It initially remained unclear who was behind the incident. According to the Leta news agency, Prime Minister Andris Kulbergs said that it cannot be ruled out that it was a cyber attack on Latvia from another country. Latvia has around 1.9 million inhabitants.

The authorities warn that unknown people could use the stolen data for fraud. Particular attention should be paid to the personal identification number, which is part of the data theft and is used by citizens as user identification for various digital services. "CSDD and CERT.LV advise the public of possible fraud risks and advise particular caution when receiving messages, emails or calls that appear to be sent on behalf of CSDD or other institutions," the statement said.

Kulbergs ordered an investigation into the incident and criticized the CSDD leadership for delaying notification of the data theft. "I have to say that I am unpleasantly surprised by a certain IT security infantilism that prevails in some supervisory authorities and state institutions," said the Prime Minister, also with a view to a hacker attack on the state forestry administration that took place in June.