News.Risky.Biz Moldova's Public Services Disrupted by Major Cyberattack
Article Content
- •Moldova shut down 82 public services after a cyberattack on October 23, 2026.
- •Sensitive data of approximately 750,000 citizens was stolen, affecting a third of the population.
- •The attack exploited vulnerabilities in an unprotected logging service.
Moldova experienced a significant cyberattack on October 23, 2026, leading to the shutdown of 82 public digital services and 30 government networks. The breach compromised sensitive data of approximately 750,000 citizens, about a third of the population, including personal and financial information. The attack was facilitated by exploiting vulnerabilities in an exposed logging service lacking authentication. Following the incident, the government initiated a security audit to restore services. Attempts by the attackers to re-enter the systems were reported on October 25 and 27, but were unsuccessful. Law enforcement agencies are now involved in the investigation. No attribution for the attack has been provided as of now.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Hive, Bitonic and CVE-2026-86950 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What type of data was compromised?
How did the attackers gain access?
What is the current status of public services?
Continue Reading
Ukrainian Ransomware Affiliate Sentenced to 70 Months for Attacks on Critical Infrastructure Artem Stryzhak, a 36-year-old Ukrainian national, was sentenced to 70 months in prison for his role in ransomware attacks targeting hospitals, government entities, and businesses worldwide from 2018 to 2021. He was involved with the Nefilim and Hive ransomware groups, extorting millions from victims, including…
China-Linked Hackers Exploit PHP2Shell to Root 25 Servers Cybersecurity firm Dream reported that a China-linked threat actor exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a Linux kernel privilege escalation flaw (CVE-2026-46300) to gain root access to 25 servers, including three in a U.S. government-affiliated environment. The attackers used…