# Moldova Investigates Foreign State Actor Involvement in Major Cyberattack Exposing 750,000 Citizens' Data **Chisinau, Moldova** – Moldovan authorities are actively investigating whether foreign state actors orchestrated a significant cyberattack that exposed sensitive personal information belonging to an estimated 750,000 citizens and temporarily crippled dozens of public services. Prime Minister **Vasile Tofan** confirmed the ongoing probe, suggesting the incident is not isolated but rather part of a larger, coordinated campaign targeting both individual data and critical government digital infrastructure. "Our country is the target of coordinated and large-scale cyberattacks. We are not talking about an isolated incident," Tofan stated, underscoring the severity and potential geopolitical implications of the breach. ## The Breach: Exploiting Vulnerabilities and Extracting Data The revelation follows an disclosure by Moldova's **Electronic Governance Agency (AGE)**, which confirmed that threat actors exploited vulnerabilities within government services between October 19 and 23. This exploitation facilitated the extraction of substantial volumes of personal information. The attackers initiated approximately 11 million requests to access data. Preliminary findings indicate that information linked to about 750,000 identification numbers was compromised. While not every affected individual had all categories of personal data exposed, the scope of potential exposure is extensive. ## Compromised Data Categories The range of potentially compromised information is broad, including: * Names, dates, and places of birth * Family relationships * Health insurance status, social benefits, pensions, and disability records * Driver's licenses * Photographs * Vehicle ownership details * Financial information, such as tax debts and government payment histories The AGE clarified that bank card information was not compromised, and investigators found no evidence of attackers altering official government records. The hackers reportedly exploited vulnerabilities in services that did not require authentication, leveraging initial access to extract additional data from interconnected government systems. ## Response and Service Disruption In immediate response, authorities inspected 82 digital public services, temporarily disconnecting those deemed vulnerable. More than 30 government information systems and administrative panels were also taken offline to mitigate further damage. These disruptions impacted a wide array of public services, including online applications for construction permits, veterinary transport authorizations, medicine imports, and food safety registrations. Most affected services have since been secured, with authorities gradually restoring access after rigorous security checks. Authorities successfully blocked unauthorized access on October 23 but detected subsequent, unsuccessful attempts to breach government services on Sunday and Tuesday, underscoring the persistent nature of the threat. ## Broader Campaign and Geopolitical Context Government spokesperson **Dumitru Ciorici** echoed the sentiment that this incident could be part of a broader campaign of hybrid attacks against Moldova. Citizens have been warned that stolen information could be used in various fraud schemes, including phishing attempts impersonating banks or public institutions to acquire passwords, authentication codes, or money. Moldova, a nation of approximately 2.4 million people bordering Ukraine and Romania, has faced a surge in cyberattacks and influence operations since Russia's full-scale invasion of Ukraine in 2022. Moldovan authorities have previously accused Russia of conducting destabilization campaigns aimed at undermining state institutions and public confidence in the country's pro-European government under President **Maia Sandu**. This latest incident serves as a stark reminder of the sophisticated and persistent cyber threats faced by nations in the current geopolitical landscape, particularly those in close proximity to ongoing conflicts.