Moldova cyberattack exposes personal data of 750,000 people
Hackers extracted personal data linked to about 750,000 state ID numbers from Moldovan government systems between 19 and 23 October, officials said.
Also in:Română
Hackers stole personal data linked to about 750,000 state identification numbers from Moldova's government computer systems in an attack between 19 and 23 October, the e-Governance Agency said. Attackers had attempted to extract data tied to roughly one million ID numbers in total.
The compromised information includes identification details, pension and social-benefit records, bank account IBAN numbers, tax debts and payment history, according to the agency; not every affected person had every category of data exposed. Officials said bank card details were not compromised, and that knowing an IBAN number alone does not allow unauthorised account access or transfers.
The unauthorised data extraction was stopped on 23 October at 11:30, Moldova's Information Technology and Cyber Security Service said. As a precaution, authorities temporarily disconnected 82 public digital services and more than 30 information systems and admin panels; most have since been restored after security checks. Further attempts to access government services were blocked on 25 and 27 October.
Prime Minister Vasile Tofan said authorities were investigating signs of a wider, coordinated campaign that could involve foreign state actors, though he did not name any country. "Our country is the target of coordinated, large-scale cyberattacks. We are not talking about an isolated incident," Tofan said.
The security service said the attackers exploited vulnerabilities in services accessible without authentication; investigators found no unauthorised changes to state registry data. Parliament's security committee will hold closed-door hearings on 4 November to examine the incident and which institutions bear responsibility, committee chairman Lilian Carp said.
Cybersecurity expert Natalia Spinu said around 15 specialists had defended the country's systems during the attack, and called for more investment in staff, clear procedures and technology to prevent a repeat. Authorities urged citizens to be alert to unsolicited calls, texts or emails asking for personal details and to verify any unusual requests directly with banks or institutions.
Follow this story
An email when there is a real update (a new toll, a cause, an arrest). Nothing else; stop with one click.
Free: one story at a time. Members follow as many stories as they like.
What we know
- Official · e-Governance Agency (AGE) Hackers stole personal data linked to about 750,000 state ID numbers from Moldovan government systems in an attack between 19 and 23 October, the e-Governance Agency said.
- Official · e-Governance Agency (AGE) Compromised data includes identification details, pension and benefit records, IBAN numbers, tax debts and payment history; bank card details were not affected.
- Official · AGE / STISC Authorities temporarily disconnected 82 public digital services and more than 30 information systems as a precaution; most have since been restored.
- Official · PM Vasile Tofan Prime Minister Vasile Tofan said authorities are investigating signs of a wider, coordinated campaign possibly involving foreign state actors.
- Official · Parliament security committee Parliament's security committee will hold closed-door hearings on 4 November into the incident.
Not yet confirmed
- Unconfirmed Who carried out the attack and whether foreign state actors were involved has not been established, the prime minister said.
How each fact is established: Verified checked by an ECTV editorOfficial stated by an official body2+ outlets reported independently by two or more news organisations1 outlet reported by a single news organisation so farUnconfirmed claimed or reportedHow we label facts
Why it matters for Europe
The breach is one of the largest known thefts of citizens' personal data from a European government system this year, and comes months after an earlier attack on Moldova's health insurance database in April. It also follows a wave of cyberattacks on European retailers in October, including one that disrupted refrigeration systems at French supermarket chains, highlighting growing pressure on digital infrastructure across the region.
Sources
Reported by 3 reports from 3 independent outlets in 1 countries.
- G4Media: Un atac cibernetic masiv asupra sistemelor guvernamentale din Republica Moldova s-a soldat cu furtul datelor personale a sute de mii de cetățeni. Expert: Sistemul nostru de securitate digitală nu este atât de bine dezvoltat pe cât s-a crezut
- Știrile ProTV: Atac cibernetic de amploare în Republica Moldova. Datele personale ale circa 750.000 de cetățeni ar fi fost extrase
- Mediafax: Atac cibernetic masiv în Republica Moldova. Datele personale a aproximativ 750.000 de persoane ar fi fost furate de hackeri
Source balance
PremiumSee how the 3 outlets behind this story spread from left to right, and which are official or OSINT sources.
Free during the launch: create an account →Log inHow we rate sources
Intelligence file
PremiumSee how we verified this story
Confidence and impact scores, the full situation report and the event timeline.
Launch offer: free for members until 31 October 2026
Questions and answers
- How many people were affected by the Moldova cyberattack?
- Data linked to about 750,000 state ID numbers was extracted, out of roughly one million numbers the attackers targeted, the e-Governance Agency said.
- Was banking information stolen?
- Officials said bank card details were not compromised, though IBAN numbers and payment history were among the data taken; an IBAN alone cannot be used to access an account.
- Who is behind the attack?
- This has not been established; the prime minister said authorities are investigating possible involvement by foreign state actors.
This article was written with AI assistance from 3 verified reports and checked under the ECTV editorial policy. Spotted an error? Request a correction.