Latvia arrests suspected hacker for electronics repair company breach

Latvian police arrested a 23-year-old in Riga on September 15 for hacking at least two companies, including LMT subsidiary TSC, stealing customer data and attempting extortion; he faces up to five years in prison.

Latvian police arrested a 23-year-old man in Riga on September 15, 2026, on suspicion of hacking at least two companies, including electronics repair firm TSC, a subsidiary of telecom group LMT. The attacks occurred in February and early September 2026, with the TSC breach taking place in September 2026. According to The Record, the suspect used automated tools to scan for website vulnerabilities rather than targeting specific companies, extracting database contents that included customer names, contact details, device passcodes, bank account numbers, and building access codes. He then allegedly demanded payment to avoid disclosure of the stolen data and faces up to five years in prison if convicted. Investigators found evidence of possible additional attacks on businesses in Latvia and abroad, and The Record reports the stolen data has not been shared with third parties. Both reports agree on the arrest, the suspect's age, the number of breached companies, and the extortion attempt; DataBreaches.net adds the timing of the attacks.

• Arrest made September 15, 2026, in Riga; suspect is a 23-year-old man
• At least two companies breached, including TSC, an electronics repair firm owned by telecom group LMT
• Attacks occurred in February and early September 2026; TSC breached in September 2026 (per DataBreaches.net)
• Stolen data included customer names, contact details, device passcodes, bank account numbers, and building access codes
• Suspect used automated tools to scan for website vulnerabilities rather than targeting specific companies (per The Record)
• Suspect demanded payment to avoid disclosure of stolen data; faces up to five years in prison if convicted
• Investigators found evidence of possible additional victims in Latvia and abroad
• Stolen data has not been shared with third parties (per The Record)