Severity major: Data on roughly 750,000 citizens, about a third of the population, was stolen in a live government compromise.
Happened 2026-10-23 · Earliest source we hold 2026-10-28, 5 days later · Captured by AI Risk Wire 2026-10-28 14:25 UTC
Hackers breached Moldovan government systems, exploiting unauthenticated vulnerabilities in an exposed logging service, and stole sensitive data on about 750,000 citizens. Government IT staff spotted the extraction on October 23; officials shut down 82 public digital services and 30 government networks, and services are being restored after security audits.
Risk grouping: Not yet classified
No source we hold states: who caused it, intended or not, before or after release, the ai's part.
The story
1 · What it was doingMoldova's government ran public digital services and government networks. Hackers exploited vulnerabilities in an exposed, unauthenticated logging service to reach government systems.
2 · What went wrongHackers breached government systems and extracted sensitive citizen data, crossing the boundary of government network security.
3 · What it reached or didData on about 750,000 citizens, roughly a third of the population, including financial details such as bank accounts, debt and MPay history.
4 · How it was caughtGovernment IT staff spotted the hackers extracting data from the network on Friday, October 23.
5 · What was doneOfficials shut down 82 public digital services and 30 government networks to stop further exfiltration; law enforcement was called to investigate, and services are being restored after security audits.
What the sources state
Records exposed 750,000
Cause a shared system was the path
No source states: the direct loss, a count of the other parties affected, any court case, what set it off.
Show every field, with its source and grade
What happened
When it happened
2026-10-23
C one secondary source states it
Earliest source we hold
2026-10-28
A the date the source itself carries
Who caught it
a human reviewer
C one secondary source states it
Cause
a shared system was the path
D inferred by us from the described behaviour, reason shown
Cause in detail
a source states a shared system or channel was the path
D inferred by us from the described behaviour, reason shown
Who caused it
an outside attacker
C one secondary source states it
What was stopped
82 public digital services and 30 government networks shut down
C one secondary source states it
What was done
Services restored after being cleared in a security audit
C one secondary source states it
Earlier warning signs
hackers also breached its healthcare database in April
C one secondary source states it
What went wrong
security breach
C one secondary source states it
AI agent
no AI agent acted
D inferred by us from the described behaviour, reason shown
Impact
Records exposed
750,000
C one secondary source states it
Severity
major
D inferred by us from the described behaviour, reason shown
Kind of harm
privacy, others' security
C one secondary source states it
Who was affected
750,000 citizens, roughly a third of the country's total population of 2.35 million
C one secondary source states it
Kinds of data exposed
personal information, financial
C one secondary source states it
Why this severity
Data on roughly 750,000 citizens, about a third of the population, was stolen in a live government compromise.
D inferred by us from the described behaviour, reason shown
Context
Industry
Public Administration
D inferred by us from the described behaviour, reason shown
Country
Moldova
C one secondary source states it
LR-2026-0256 · version 2 · published 2026-10-28 after automatic checks; not yet checked field by field by a person · changes to this case · JSON