Hackers extracted data linked to approximately 750,000 Moldovans from government systems, according to information released by the Electronic Governance Agency. Officials also reported that the attempted attacks targeted around one million people.
The unauthorised access attempts took place between October 19 and 23. After identifying the incident, the Electronic Governance Agency ordered checks of 82 digital services and temporarily suspended services exposed to risk, along with a number of information systems. Officials said the intervention isolated the attack and prevented further compromise.
According to the agency, the unauthorised data extraction was stopped on October 23 at 11:30 a.m. At the same time, 82 public services and more than 30 information systems and administrative dashboards were disconnected as a precaution. The responsible institutions were notified and received technical recommendations to address the vulnerabilities.
On October 25, at around 2:00 a.m., specialists identified and blocked a new attempt to force access to several government public services. Further unsuccessful attempts were reported on October 27, at around 7:00 a.m.
“According to preliminary estimates, data sets associated with approximately 750,000 personal identification numbers (IDNPs) were extracted without authorisation. The information targeted includes identification details (first and last names, dates and places of birth), information about first-degree family members, insured status, family doctor details, social benefits, pensions, disability status, driving licences, photographs, vehicles, and companies owned or managed by the individuals concerned. It also includes financial information, such as IBANs, tax debts and MPay payment histories,” the Electronic Governance Agency said.
Officials said the main risk is that the data could be used in fraud attempts and online manipulation, and urged citizens to remain vigilant.
“Bank card information was not affected. Card payments through MPay and EVO are processed using banks’ secure systems, and the government platform does not store this sensitive information.
“Furthermore, simply knowing someone’s IBAN does not allow access to their bank account or the execution of unauthorised transfers. IBANs are routinely used to receive funds and make transfers, including donations.
“The investigations have not identified any unauthorised changes to data in state registers. Accessing information about a property or a company does not amount to transferring ownership rights,” the agency added.
To reduce the risks, citizens are advised to be cautious of suspicious phone calls, text messages and emails, avoid clicking on dubious links, verify any information they receive, and never authorise payments at the request of unknown individuals.
Officials also explained that the hackers initially targeted an electronic service that incorrectly recorded the legal basis for processing personal data. As a result, citizens noticed entries in the EVO app’s data-access history indicating that their information had been processed for services involving requests for civil status documents or the issuance of driving licences.
The investigation is ongoing, and affected individuals are expected to be informed of its findings.