Latvia’s road traffic agency said hackers stole data tied to about 1.2 million people and 200,000 businesses from systems handling vehicle and driver records. The Road Traffic Safety Directorate (CSDD) said the stolen data came from payment receipts dating back to 2008 and included personal or company ID numbers, vehicle license plate numbers, payment details, and some addresses. CERT.LV said attackers exploited a vulnerability in an internet-exposed CSDD system and that required cybersecurity controls had not been fully met.
Why it matters: This affects a large share of Latvia’s population and creates immediate risk of targeted fraud and social-engineering attacks using real vehicle and identity data. Affected users should be wary of messages or calls referencing vehicle payments or registration details, while public-sector defenders should review exposed systems and access controls urgently.
2026.08.19
100% relevant
This article establishes a distinct new breach story by confirming the scope, data types, likely attack path, and political fallout from the CSDD incident.
← Back to all stories