The National Armed Forces of Latvia (NBS) are considering changing license plates on their vehicles following a large-scale cyberattack on the Road Traffic Safety Directorate (CSDD) in early August, according to the NBS. The breach exposed personal data belonging to 1.2 million individuals and information on approximately 200,000 legal entities, including 18 years of payment data tied to the directorate.
Risk Assessments and Security Measures for Latvian Agencies
A final decision regarding the replacement of vehicle plates and the associated funding depends on the completion of an upcoming risk assessment, according to the NBS. Recommendations from Latvian security services will guide these determinations, though the military has not specified which particular units’ vehicles might receive new plates. This security review extends beyond the armed forces to include other state bodies involved in operational activities, as reported by the NBS. While some agency vehicles feature special coloring and identification marks, others operate as unmarked cars utilized for undercover investigations and national security missions.
State Police Request and Operational Impacts
The State Police, which represents the largest agency conducting operational activities, confirmed to LETA that it submitted a formal request to the CSDD. The police are asking the directorate to determine the specific risks associated with the data leak concerning police-registered vehicles. Once the police receive this risk assessment, the agency will decide whether service vehicles require new license plates. Authorities have also indicated that additional security measures remain under consideration, though specific details have not been disclosed.
Did You Know? The cyberattack on the Road Traffic Safety Directorate (CSDD) compromised payment data accumulated over the past 18 years, alongside records for roughly 200,000 legal entities.
Frequently Asked Questions
Which agency experienced the cyberattack?
The cyberattack targeted the Road Traffic Safety Directorate (CSDD) in early August.
What data was compromised in the breach?
According to reports, attackers obtained the personal data of 1.2 million individuals, information on about 200,000 legal entities, and 18 years of payment data.
Are other security measures besides changing plates being considered?
Yes, agencies have stated that other security measures are not ruled out, though specific details have not been disclosed.
What steps should state agencies take when core registry databases are compromised to protect sensitive operational assets?
Worth a look