Hackers gain partial access to Latvia's road traffic agency CSDD IT system
Cyberattackers managed to partially breach the IT system of Latvia's Road Traffic Safety Directorate (CSDD), extracting some personal data. The attack has been stopped and customer passwords were not affected.
Latvia's Road Traffic Safety Directorate (CSDD) has confirmed that cyberattackers gained partial access to its IT system and extracted a portion of the data stored there. The agency says the stolen information included certain personal data — personal identity codes or registration numbers, names or company names, payment details, payment dates, vehicle license plates and addresses.
Risk of targeted fraud attempts
Varis Teivāns, deputy head of the national cyber incident response institution Cert.lv, warned that the obtained data could potentially be used for further targeted fraud attempts. Both CSDD and Cert.lv are urging residents to be especially cautious of emails, text messages or other communications that appear to come from CSDD, recommending that people verify such messages through the official portal e.csdd.lv.
Attack halted, services unaffected
CSDD stressed that the incident has not affected its in-person services or e-services, which continue to operate as usual. The agency's IT team, working together with Cert.lv, has already stopped the cyberattack and implemented a series of security improvements to the IT system to prevent similar incidents in the future.
Māris Puriņš, head of CSDD's IT department, said the methods and channels used by the attackers have been identified and are now fully blocked. He emphasized that customer usernames and passwords were not compromised, meaning no additional action is required from clients. Nevertheless, he too urged the public to remain vigilant and check information through e.csdd.lv.
Investigation ongoing
Teivāns noted that the investigation, conducted jointly with CSDD, is continuing and the exact circumstances of the attack are still being clarified. Information gathered so far indicates the attack was deliberate and preceded by careful preparation, with the methods used suggesting a high level of technical competence on the part of the attackers. CSDD has informed other relevant state authorities, including the State Data Inspectorate, as it works to address the consequences of the breach.
