Is the breach of the state administration system related to the failure of the e-Kmetija platform?
The Slovenian government information security office (URSIV) confirmed it is investigating two separate cybersecurity incidents but declined to disclose specific details due to ongoing investigations. One incident involves a cyber intrusion into the state administration's information system, where attackers accessed over 15,000 user records, including 7,216 entries with hashed passwords. Simultaneously, the Agency for Agricultural Markets and Rural Development reported that several applications on the e-Kmetija agricultural portal had stopped working on October 27, disrupting the processing of farmer applications and payments. URSIV stated it cannot confirm or deny a connection between the state administration breach and the e-Kmetija outage, nor did they specify which parts of the state administration were affected or if user data on the agricultural portal was compromised. Key questions regarding the scope of the disruption, the identity of the targeted state organs, and potential data exposure remain unanswered.
Go to the primary sources (3)
The official sources this coverage is built on. Read them directly to bypass framing.
The Slovenian government information security office (URSIV) confirmed it is investigating two separate cybersecurity incidents but declined to disclose specific details due to ongoing investigations. One incident involves a cyber intrusion into the state administration's information system, where attackers accessed over 15,000 user records, including 7,216 entries with hashed passwords. Simultaneously, the Agency for Agricultural Markets and Rural Development reported that several applications on the e-Kmetija agricultural portal had stopped working on October 27, disrupting the processing of farmer applications and payments. URSIV stated it cannot confirm or deny a connection between the state administration breach and the e-Kmetija outage, nor did they specify which parts of the state administration were affected or if user data on the agricultural portal was compromised. Key questions regarding the scope of the disruption, the identity of the targeted state organs, and potential data exposure remain unanswered.
Bias read (Progressive): The article emphasizes the government agency's refusal to provide transparency and answers regarding the scope of the breach and data safety, highlighting institutional opacity rather than attributing blame to external actors.
Hackers accessed the Domino information system used by parts of the Slovenian state administration, according to recent reports. The Information Security Office (URSIV) clarified that the incident affected official accounts of state organs rather than individual citizens, noting that the breach occurred toward the end of October. Unofficial data suggests entry was made through the e-Kmetija agricultural portal, which remains partially non-functional. The Agency for Agricultural Markets and Rural Development denies the incident originated from their servers, while former URSIV director Uroš Svete disputes this claim, pointing to previous service disruptions. Of the 7,216 stolen password hashes, experts note that passwords can only be recovered in rare cases if hashing was poorly implemented or weak passwords were used, though changing credentials is recommended.
Bias read (Center): The article presents conflicting claims between the agency and a former official regarding the attack vector without taking a side, relying on technical explanations and direct quotes from both parties.
The article reports on a cyberattack against the Slovenian state administration, where over 15,000 user credentials were stolen from government agency accounts rather than citizen service portals. The incident involved a server for the Ministry of Agriculture running on the outdated Lotus Notes platform, which experts identify as a significant security risk due to its age. Digital technology expert Aleš Špetič argues that the core issue is poor 'digital hygiene' and a lack of specialists within the civil service, noting that while urgent national issues are handled quickly, digitalization efforts often lag behind. He highlights that approximately 200 such legacy servers remain active in the state administration, requiring dedicated maintenance. Although the Information Security Office was invited to comment on the matter, they declined to participate in the broadcast discussion.
Bias read (Center): The piece relies on a single technical expert to explain systemic administrative failures regarding cybersecurity infrastructure, presenting factual details about the breach and legacy systems without employing partisan rhetoric or attributing blame to specific political actors.
The Slovenian Information Security Office (Ursiv) reported that an unauthorized actor accessed over 15,000 user account records from the state administration's Domino system via a compromised server belonging to a state body. Among the stolen data were 7,216 entries containing hashed passwords, which could potentially be cracked under certain conditions. Experts suggest the breach might be linked to ongoing issues with the e-Kmetija agricultural portal, though the relevant agency states there is currently no evidence connecting the two incidents. Authorities have isolated the affected server, mandated password resets, and urged users to enable multi-factor authentication while the national CERT team continues its investigation.
Bias read (Center): The article maintains a neutral tone by balancing expert speculation regarding potential links between systems with official denials from the agricultural agency, relying on factual reporting of security measures.
The Slovenian Information Security Agency reports that an ongoing cyberattack has compromised over 15,000 user credentials within the state administration. Affected employees are required to change their passwords across all personal services where similar credentials were used. The agency emphasizes that the analysis of the attack's scope, circumstances, and potential consequences is still in progress. The incident highlights broader challenges in cybersecurity, particularly regarding the integration of artificial intelligence into offensive operations. This development transforms cyber threats into continuous attacks that do not pause, raising questions about whether current defense mechanisms can keep pace with increasingly sophisticated intrusions.
Bias read (Center): The article relies exclusively on official statements from the Information Security Agency and poses balanced rhetorical questions without employing loaded language or taking a partisan stance.
Authorities are currently analyzing the scope, circumstances, and consequences of a cyber intrusion into the information system of the state administration, during which attackers obtained data regarding user accounts. Officials clarified that the recommendation to change passwords applies exclusively to employees of the state administration rather than all citizens. Additionally, the Agency for Agricultural Markets and Rural Development notified users last Tuesday that several applications on the e-Kmetija portal were temporarily non-functional due to the incident. These affected services include tools for submitting reports under the e-PRP framework, external trade management, market measures implementation, the IRP15 intervention under the 2023-2027 Strategic Plan, and the reporting system. The e-Kmetija portal is described as one of Slovenia's largest databases, containing sensitive information about investors, animals, and companies.
Bias read (Center): The article relies entirely on official statements and factual reporting of the security breach and service disruptions without employing loaded language or taking a partisan stance.
The Office for Information Security (URSIV) issued additional clarifications regarding a cyber intrusion detected in late October within the information system of the state administration. The investigation by the SIGOV-CERT response team determined that unauthorized access occurred to data on a web server belonging to one of the state agencies, specifically affecting the Domino system used in government operations. Attackers obtained user account data and hashed password values, though they did not gain access to passwords in readable form. Authorities explicitly stated that the incident involves employee accounts of state organs rather than citizen accounts used for accessing public e-services, meaning the call to change passwords does not apply to all citizens. Affected users were advised to immediately reset their passwords and exercise caution regarding suspicious messages linked to the incident, while further analysis continues to determine potential security measures.
Bias read (Center): The article relies exclusively on official statements from the Office for Information Security to report technical details and clarify the scope of the breach without adding editorial commentary or external criticism.
A cyberattack on a state administrative information system resulted in the theft of over 15,000 user records, including 7,216 hashed passwords, via a compromised web server running the Lotus Domino platform. The Government Office for Information Security (URSIV) issued a warning on November 1, advising all affected users to immediately reset their credentials across both official and private accounts due to the risk of password reuse. Although the specific government agency targeted has not been publicly disclosed, the incident is being investigated by the national CERT team alongside relevant technical services. Authorities recommend enabling multi-factor authentication to mitigate further risks, noting that while hashed passwords are difficult to reverse, they remain vulnerable under certain conditions. The Ministry of the Interior manages approximately 200 Lotus Domino servers within the state administration, which are currently being phased out in favor of newer solutions.
Bias read (Center): The article relies exclusively on official security advisories and technical explanations regarding data breach protocols, avoiding speculative attribution or political commentary on the incident.
The Government Office of the Republic of Slovenia for Information Security reported a cyber intrusion into the state administration's information system, affecting over 15,000 user accounts. Attackers accessed data through a compromised web server belonging to a state body, obtaining 7,216 records containing hashed password values that could potentially be reversed to reveal original passwords. Authorities have isolated the affected server from the network and mandated immediate password resets for all impacted users. Users are advised to change similar passwords used elsewhere and enable multi-factor authentication where possible. SIGOV-CERT continues analyzing the incident in cooperation with technical services and will provide updates via official channels.
Bias read (Center): The report relies exclusively on official security advisories and factual descriptions of the breach mechanics without attributing blame to specific political actors or using loaded language regarding government competence.
The Office of the Government of the Republic of Slovenia for Information Security (URSIV) has issued a warning regarding a cyberattack on the state administration. The attacker accessed over 15,000 user records from the Domino system via a compromised server belonging to a state body. Of these, 7,216 records contained hashed password values, which could potentially allow attackers to recover original passwords in certain cases. Authorities have isolated the affected server and are urging all impacted users to immediately reset their passwords. Users who reuse similar passwords across other services are advised to change them and enable multi-factor authentication where possible.
Bias read (Center): The article relies exclusively on official security advisories and technical facts without employing loaded language or partisan framing.
Slovenia's Office for Information Security (URSIV) has issued an urgent advisory requiring all users of the state administration information system to immediately change their passwords following a detected cyberattack. The breach involved an unknown attacker compromising a server within a state body, which led to the theft of login credentials for approximately 15,000 user accounts on the Domino system. Of these, 7,216 records contained hashed password values, necessitating a mandatory reset for all affected users. Authorities have disconnected the compromised server from the network and recommend that individuals also update any other accounts where they reuse the same password, while additionally enabling multi-factor authentication. The State Information Security Center (SIGOV-CERT) is currently conducting a detailed analysis of the incident, and URSIV plans to release further findings as more information becomes available.
Bias read (Center): The article relies exclusively on official security advisories and technical facts regarding the breach, using neutral language without editorializing or attributing blame to specific political actors.
The Office of the Government of the Republic of Slovenia for Information Security (URSIV) has issued an alert regarding a serious cyber incident affecting state administration systems. An attacker accessed over 15,000 user records from a compromised HCL Domino server belonging to a state body, including 7,216 entries containing password hashes. These hashed credentials could potentially be reversed using advanced methods to reveal original passwords. The report highlights remote work as a critical vulnerability, noting that home networks often lack the robust security infrastructure of government buildings, making them easier targets for interception. Authorities urge all affected users to immediately reset their passwords across all platforms and enable multi-factor authentication to mitigate the risk of credential reuse attacks.
Bias read (Center): The article relies exclusively on official government security advisories and provides technical explanations without employing loaded language or omitting relevant context regarding the breach.
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
Slovenia
