Lithuania Investigates Massive Data Breach Exposing Sensitive State Records
Lithuanian authorities are investigating a significant data breach affecting the nation's state registry systems, potentially compromising sensitive personal and property records. The breach, which targeted the **Centre of Registers**, involved the misuse of authorized login credentials and impacted over 600,000 records.
Lithuanian prosecutors are investigating a major data breach affecting the countryβs state registry systems that potentially exposed sensitive personal and property records.
### Breach Details
The Lithuanian Prosecutor Generalβs Office said Friday that attackers gained unauthorized access to more than 600,000 records managed by the **Centre of Registers**, the state agency responsible for handling property and legal entity records.
Prosecutors said the breach involved the misuse of login credentials assigned to institutions authorized to access the databases, and likely originated from an unnamed foreign country. According to the authorities, the stolen information primarily came from Lithuaniaβs Real Estate and Legal Entities Registers, databases that provide paid access to official property and corporate records. Initial estimates put the financial damage at more than β¬111,000 ($129,000).
The **Centre of Registers** said in a statement Tuesday that the compromised data included personal information such as names, dates of birth and national identification numbers, along with property-related data including addresses, cadastral information and registry numbers. No contact details, bank account information, payment data or official documents such as court rulings or cadastral measurement files were exposed, according to the agency.
### Response and Aftermath
Lithuanian authorities said they introduced additional cybersecurity measures after detecting the breach, including blocking accounts suspected of being misused and requiring users to update access credentials.
The breach was first detected in early April, according to **Centre of Registers** chief **Adrijus Jusas**, though authorities delayed public disclosure because of the ongoing criminal investigation.
**Jusas** resigned Monday following scrutiny over the incident. βGiven the sensitivity of the situation, I have decided to step down and hand over responsibility to other professionals,β he said in comments cited by Lithuanian media.
In a separate interview with local outlets, **Jusas** blamed years of underinvestment in state IT infrastructure, saying the systems required up to β¬60 million ($69.8 million) in upgrades to meet modern cybersecurity standards.
### Potential Geopolitical Implications
On Facebook, **Laurynas Kasciunas**, leader of Lithuaniaβs conservative opposition party and a former defense minister, alleged that the breach showed βthe hallmarks of a Russian intelligence operation,β though he did not provide evidence for the claim. He also suggested that compromised accounts linked to Lithuaniaβs Migration Department may have been used in the attack.
He warned that residential address data tied to sensitive government personnel could be exploited for surveillance, phishing campaigns, coercion or sabotage planning during a crisis.
Lithuanian prosecutors have neither confirmed nor denied possible Russian involvement, and no hacking group has publicly claimed responsibility.
Lithuania, a **NATO** and **European Union** member bordering the Russian exclave of Kaliningrad as well as Russiaβs ally Belarus, has repeatedly accused Moscow of conducting hybrid operations against the country, including cyberattacks, disinformation campaigns and acts of sabotage.
The incident follows similar attacks on government registries elsewhere in Eastern Europe. Last year, Slovakiaβs land registry system suffered a major cyberattack that disrupted property and construction services nationwide. Around the same time, suspected Russian hackers breached Ukraineβs state registries, temporarily disrupting access to essential government services tied to digital records.

