Cyberattack on Moldova's e-government systems exposes data tied to 750,000 national ID numbers

On 27 October 2026, Moldova's e-Governance Agency (AGE) — the body that operates the country's digital public services and shared government platforms — published preliminary findings on a large-scale cyberattack that exposed personal data tied to roughly 750,000 national identification numbers (IDNPs), equivalent to about a third of the country's resident population. According to the agency, attackers abused government services that did not require authentication to query records and pull data without authorisation.

What happened

AGE said the unauthorised activity ran from 19 October to 23 October 2026, during which attackers queried about one million IDNPs in an attempt to harvest personal data. The agency stressed that the preliminary figure of 750,000 does not mean that many digital identity accounts were hacked, but rather reflects the number of national ID numbers linked to data that was exposed through the vulnerable services. When the extraction was detected and stopped on 23 October, authorities examined 82 digital public services and temporarily disconnected those found to be vulnerable, along with more than 30 information systems and administration panels, as a precaution.

The categories of data reportedly at risk were broad: names, dates and places of birth, family relationships, health insurance status, social benefits and pensions, driving-licence details, photographs, vehicle ownership, bank account numbers and tax information. Not every affected person had every category exposed, and investigators said they found no evidence that state registers had been altered.

Attribution and fallout

Prime Minister Vasile Tofan said authorities were investigating indications of a broader campaign potentially involving foreign state actors, though no perpetrator has been publicly identified. The incident prompted a leadership change at the agency: director Nicoleta Colomeeț announced she was ending her mandate, with Artiom Cociu taking over on an interim basis.

Why it matters

The breach highlights the systemic risk of consolidating citizen data behind digital-government platforms when individual services lack basic access controls. Because the exposed records span identity, financial and family details for a large share of Moldova's population, the data could fuel targeted fraud, phishing and social-engineering campaigns for years, and the suspected involvement of a foreign state raises the prospect of intelligence exploitation beyond ordinary criminal misuse.