Moldova shuts down 82 public services after hackers steal data on about 750,000 people
October 23, 2026 (Detected October 23, 2026)
On October 23 Moldovan government IT staff noticed data being pulled out of state systems. To stop the theft, officials shut down 82 public digital services and 30 government networks. The country's e-government agency says the attackers took sensitive details on about 750,000 citizens, roughly a third of the 2.35 million population. The data includes names, birth details, family information, insurance and pension records, driver's licence data, photos, property records and financial details such as bank accounts and debts. Reporting says the attackers got in through a logging service that was exposed to the internet without authentication, and that they tried to get back in on Sunday and Tuesday and failed. Officials have not said who is responsible. Services are being restored one at a time after each passes a security audit. It is Moldova's second major breach this year, after a hack of its healthcare database in April.
Why it matters
The stolen records tie a person's identity to their family, property and money, which is what fraudsters need to impersonate people or pressure them. The reported way in was a support tool left open to the internet, a reminder that small oversights can open a national system.
What defenders can take from it
- Keep logging, monitoring and administration tools off the public internet or behind authentication, and review what data they store.
- Separate national identity and benefits databases so that one compromised tool cannot reach them all.
- Residents: expect scam calls and messages that use real family or property details, and check with the agency through an official channel before responding.