Moldova Warns of Fraud Risk After Data Breach Exposes Records

Moldova’s e-Government Agency detected a cyberattack on government digital services on the night of 22 October. The attackers exploited vulnerabilities in services that did not require authentication and attempted to access citizens’ personal data, according to IPN[.]md. Systems recorded about 11 million requests to government services. After experts noticed unusual activity, officials temporarily shut down services considered at risk; the attack was stopped on 23 October. Some online services remain unavailable while they undergo an audit.

Preliminary figures indicate that information relating to about 750,000 people may have been obtained, although authorities are still investigating the incident. The data could include names, birth details, information about family members, insurance, pensions, benefits, disabilities, photographs, driving licences and vehicles, and financial records such as IBANs, tax debts and MPay payment history.

Authorities say bank card details were not compromised and investigators found no evidence that data in state registers had been changed without authorisation. Law enforcement and the National Center for Personal Data Protection are involved in the investigation.

Authorities warn that exposed personal information could be used in fraud attempts. They advise people not to share passwords or authentication codes, follow suspicious links or approve payments requested by strangers, and to verify unusual requests directly with the relevant bank or institution through official channels.