This incident involved the deliberate misuse of legitimate B2B login credentials assigned to authorized institutions, likely by a foreign state actor, to exfiltrate over 600,000 records from Lithuania's national registries. The attack vector was credential compromise, not a technical software vulnerability, therefore CVSS scores, affected software versions, and specific patches are not applicable. In response, authorities have implemented immediate account blocks and mandatory credential resets for authorized users.
The Lithuanian Prosecutor General’s Office is currently investigating a significant cybersecurity incident involving unauthorized access to more than 600,000 records. These records are managed by the Centre of Registers. According to investigators, the breach likely originated from an unnamed foreign country and involved the deliberate misuse of login credentials assigned to institutions authorized to access the state databases. The exfiltrated data primarily originated from Lithuania’s Real Estate and Legal Entities Registers, according to authorities. Thedata breachwas detected in early April, and the resulting financial damageis estimatedat more than €111,000. The Centre of Registerssaid thecompromised personal and property data includes: The agency confirmed that no contact details, bank account information, payment data, court rulings, or cadastral measurement files were exposed during the intrusion. Individuals can check whether their personal data has been disclosed by logging in tothe self-service system of the Centre of Registers. Laurynas Kasciunas, leader of Lithuania’s conservative opposition party and a former defense minister,said thisdata “was stolen using the access from the Department of Migration to the Ministry of Interior systems.” In response to the threat, authorities implemented immediate security controls, blocking suspected accounts and mandating that users update their access credentials. Following scrutiny over the incident, Centre of Registers chief Adrijus Jusasresigned onMonday. Regarding advanced threat attribution, Kasciunas alleged that the attack exhibited the hallmarks of aRussianintelligence operation. However, the Lithuanian Prosecutor General’s Office has neither confirmed nor denied possible Russian involvement, and no hacking group has publicly claimed responsibility for the cyberattack. Last week, the EU's Ursula von der Leyensaid thatRussia's threats against the Baltics were completely unacceptable and “a threat against our entire union.” In late April, theEU sanctioned Russian propagandanetworks Euromore and Pravfond with asset freezes. In February, the French government disclosed a majornational bank account registry breach, and theGeneral Directorate of Civil Registryin Ecuador was hit by a DDoS attack in January. Get expert insights on threats, breaches, scams, and security trends — delivered every Monday. Get expert insights on threats, breaches, scams, and security trends — delivered every Monday. Get expert insights on threats, breaches, scams, and security trends — delivered every Monday. Please enter a valid email address. TechNadu keeps you informed with the latest in cybersecurity, VPNs, and technology. From expert guides to in-depth reviews, we provide the knowledge you need to stay secure and connected in the digital world. © 2026 TechNadu. All Rights Reserved. TechNadu is a part ofLeaprove Media LLP. This website uses cookies to ensure you get the best experience on our website.