Cyberattack on Latvia’s CSDD Exposes Historical Payment and Personal Data
Summary
Latvia’s CSDD says attackers partially accessed its IT system and obtained historical payment data containing some personal information. The attack was stopped, services remain available, and the incident is under investigation.
Key points
- CSDD reported a targeted cyberattack over the weekend that partially penetrated its IT system.
- Attackers obtained historical payment records that may include names, personal identity codes, addresses, vehicle registration numbers, payment details and dates; company names and registration numbers may also be exposed.
- CSDD said customer usernames and passwords were not compromised, so password changes are not currently required.
- CSDD IT staff and CERT.LV stopped the attack and took additional security measures; the investigation continues.
- CERT.LV described the attack as carefully prepared and targeted, with methods indicating a high level of technical preparation.
- Authorities warned that stolen information could be used for fraud and urged residents to be cautious of messages impersonating CSDD.
- CSDD said the incident did not disrupt in-person or online services; relevant government agencies were informed.
Article Details
- Victim Organization
- CSDD (Road Traffic Safety Directorate)
- Incident Type
- Cyberattack involving partial intrusion into CSDD's IT system and exposure of historical payment data
- Disclosure Date
- 2026-08-13
- Data Types Exposed
- Names and surnames
- Personal identification numbers
- Addresses
- Vehicle registration numbers
- Payment information and payment dates
- Company names and registration numbers
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- CSDD reported that the attack did not affect its services; in-person and electronic services remained available. The attack was stopped, and the investigation was ongoing.
- Ransom Or Extortion
- None reported
- Claim Status
- confirmed