Cyberattack at Romania’s Central Depository Exposes Users’ Personal Data

Summary

Romania’s Central Depository says a cyberattack exposed users’ personal data, including national ID numbers and IBANs, and temporarily disrupted its investor enrollment app. It notified the national cybersecurity directorate and brought in specialists.

Key points

• The Central Depository said attackers viewed personal data used for user enrollment, including names, addresses, national ID and identity-card details, email addresses, phone numbers and IBANs.
• The institution said the accessed data had not been modified or altered.
• The investor enrollment application was temporarily unavailable.
• The institution said application passwords were not accessed in the attack.
• The Central Depository notified Romania’s National Cyber Security Directorate and engaged specialists to handle the incident.
• Users were advised to use unique passwords, enable two-step authentication where available, and watch for suspicious messages or fraud attempts.