Hacker attack wiped out Romanian land registry

In Romania, a cyberattack has rendered the land registry book inaccessible, disrupting property transactions and raising concerns over data security. The attack, which occurred recently, led to the complete unavailability of the national land records system, preventing both residents and officials from accessing critical information. The Romanian National Agency for Cadastre and Publicity of Immovable Property (ANCPI) confirmed the outage, stating that the system was compromised through unauthorized access. Initially, the agency attributed the issue to technical difficulties during upgrades, but later admitted it was a breach. Hackers claimed responsibility online, releasing some stolen data before the public was informed of the breach last week. The government refused to pay a ransom, leaving encrypted files undecryptable and causing disruptions in property trade operations. The attack targeted the country’s central land registry database, which holds essential records for property ownership, taxation, and legal documentation. Without functioning access to this system, citizens face challenges in verifying ownership, conducting transactions, and fulfilling legal obligations. ANCPI stated that they are currently working to restore the system, implementing measures to recover lost data and prevent similar incidents in the future. Despite having multiple backups, the recovery process is ongoing, with one cybersecurity firm identifying an Algerian national as the account holder behind the breach. The incident highlights broader vulnerabilities in digital infrastructure, particularly within governmental systems responsible for managing sensitive data. Experts suggest that such attacks often begin with phishing attempts or exploiting outdated software, followed by deeper infiltration into internal networks. Some users have pointed out that while front-end login interfaces are commonly targeted, attackers frequently exploit older, unpatched services or misconfigured systems. A few commenters noted the possibility of insider threats or overlooked administrative settings, such as active debug modes, which could provide entry points. Others referenced past incidents, including a notable case involving the HSE (Health Service) in 2023, where a similar breach exposed personal health data. Romanian authorities have responded by emphasizing their commitment to improving cybersecurity protocols and increasing transparency. ANCPI has announced plans to enhance its information systems and implement stricter access controls. However, the delay in acknowledging the breach has raised questions about the responsiveness of public institutions to cyber threats. While the government has not yet issued a formal statement on potential sanctions against the perpetrators, the incident underscores the need for greater investment in digital security infrastructure. Cybersecurity firms have called for increased collaboration between public agencies and private sector experts to address systemic weaknesses. Public reaction has been mixed, with many expressing frustration over the disruption caused by the breach. Some users have compared the situation to past instances where similar issues affected other countries, such as Slovakia, where access to land records was restricted for years. Others have questioned whether the current measures will be sufficient to prevent future breaches, especially given the growing sophistication of cyberattacks. Meanwhile, discussions on online forums have focused on the broader implications of such incidents, with some suggesting that improved legislation and faster implementation of regulatory changes could help mitigate risks. As the restoration efforts continue, the long-term impact of the breach remains uncertain. While ANCPI claims progress is being made, the loss of critical data and the exposure of sensitive information pose lasting consequences. The incident serves as a stark reminder of the importance of maintaining robust cybersecurity practices, particularly in sectors handling vital public services. With the global landscape of cyber threats evolving rapidly, the Romanian experience offers valuable lessons for other nations facing similar challenges. Until the system is fully restored, the effects of the breach will likely persist, affecting both individuals and businesses reliant on accurate land record information.