Cyberattacks Target Romanian Public Institutions, Data Compromised

• •ANCPI suffered a severe cyberattack, marking the worst incident in its history.
• •Phishing campaigns using cloned government portals are targeting citizens.
• •The hacker group 'ByteToBreach' has claimed responsibility and is selling stolen data.

A wave of cyberattacks has targeted several Romanian public institutions, primarily affecting the National Agency for Cadastre and Land Registration (ANCPI) and the Ministry of Investments and European Projects. The attacks began on July 14, 2026, leading to significant disruptions, including the e-Terra application becoming non-functional. A phishing campaign utilizing a cloned version of the government payment portal ghiseul.ro has also been reported. The hacker group 'ByteToBreach' claimed responsibility for the ANCPI breach, exploiting a known vulnerability from 2021 and allegedly selling stolen data online. The ANCPI described this incident as the most severe technical attack in its history, with ongoing investigations into potential ransom demands. Authorities have confirmed that personal data of Romanian citizens has been compromised, raising concerns about the security of sensitive information. The Romanian government has issued warnings to citizens regarding phishing attempts related to traffic fines.