Cyber Incident Disrupts MIPE Procurement App; PNRR Platform Unaffected

Summary
Romania’s MIPE said a cyber incident made its Private Beneficiaries Procurement application inaccessible. Authorities are investigating and working to restore it; officials said the PNRR platform was not affected and remains functional.
Key points
- MIPE confirmed a cyber incident affecting its Private Beneficiaries Procurement application, which is currently inaccessible.
- The application supports procurement procedures for private beneficiaries of projects funded through Cohesion Policy.
- DNSC said it was notified on July 16, 2026, and is assisting MIPE and other authorities with incident response and impact limitation.
- MIPE technical teams and relevant authorities are investigating and working to restore the application.
- Officials clarified that the PNRR platform was not targeted and remains functional.
- Early reports citing unnamed sources alleged that a database had been deleted, but the article does not establish that claim; data recovery, possible data extraction, attacker identity, and broader effects remained unknown.
Article Details
- Victim Organization
- Ministerul Investițiilor și Proiectelor Europene (MIPE)
- Incident Type
- Cyber incident affecting the Achiziții Beneficiari Privați application. Early reports alleged unauthorized access and deletion of a PNRR database, but officials clarified that the PNRR platform was not targeted and remains functional.
- Incident Date
- 2026-07-16
- Disclosure Date
- 2026-07-16
- Operational Impact
- The Achiziții Beneficiari Privați application was inaccessible. Technical teams and relevant authorities were working to investigate the incident and restore the application. Broader disruption to the ministry’s systems was unknown.
- Claim Status
- confirmed
