Skip to content
NewA calmer, faster ZeroHour
StoryData breachhighExploited in the wild

Moldova probes government breach that may have exposed 750,000 people

2 sources · 2 articlesFirst reported Updated ()1 · 1 read
What's new

October 28: The Record reports Moldova is investigating possible foreign state involvement, a window starting October 19, and that more than 30 systems were disconnected while services are restored.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Moldova says a cyberattack on unauthenticated government services may have exposed data tied to about 750,000 people; cards were not taken.

Moldova’s Electronic Governance Agency says attackers exploited vulnerabilities in government digital services reachable without authentication, logging about 11 million requests. Personal data linked to roughly 750,000 people or identification numbers may have been exposed; officials call that figure preliminary and say not every person had every category of data taken. Possible records include identity, family, health, benefits, pension, photos, driving and vehicle details, IBANs, tax debts and payment histories. Bank card data was not compromised, and investigators found no unauthorized changes to official registers. Access was blocked on October 23 and later attempts failed. More than 30 systems were temporarily disconnected; disrupted services are being restored after checks. Law enforcement and the data-protection authority are investigating, and Prime Minister Vasile Tofan said Moldova is examining possible foreign state involvement, though no country or group has been named.

Key facts
  • About 750,000 people or identification numbers may be affected; the figure is preliminary.
  • Attackers logged about 11 million requests against unauthenticated services.
  • Bank card data was not compromised and state registers were not altered.
  • More than 30 systems and administrative panels were temporarily disconnected.
  • Officials say an IBAN alone cannot move money or open an account.
  • Moldova has not attributed the attack to any country or hacking group.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 19, 2026The Record says the unauthenticated-service attack began. · The Record
  2. Oct 22, 2026Agency says the attack was detected that night. · DataBreaches.net
  3. Oct 23, 2026Access was blocked and the attack was stopped. · DataBreaches.net

What each outlet adds

beyond the shared facts
  • DataBreaches.netDetection on the night of October 22 and fraud risk from stolen data.
  • The RecordPossible foreign involvement, October 19 start, and 30-plus systems offline.
Victims
Government of MoldovaMoldova government digital services
Organizations
Electronic Governance Agencye-Government AgencyNational Center for Personal Data Protection
Countries
Moldova

Coverage

oldest first · one row per article · UTC
  1. · 3d ago DataBreaches.netFirst report

    Moldova says government breach may have exposed 750,000 people

    Attackers hit unauthenticated government services from October 22 to 23; card data was not compromised, officials say.

  2. · 2d ago The Record

    Moldova investigates foreign role in government data breach

    Attackers made about 11 million requests and extracted data linked to roughly 750,000 identification numbers.