2026 ANCPI Romania — bytetobreach ransomware/data-for-sale claim (unverified; Jul 14)
Data compromised
Actor-claimed: Romanian citizens' cadastre/property records, internal databases, and core system source code; linked to reported government IT shutdown—unverified; no attested individual count
Technical writeup
Unverified ransomware/data-for-sale claim — observed July 14–15, 2026. Dark Web Informer reported forum actor bytetobreach listed Romania's Agenția Națională de Cadastru și Publicitate Imobiliară (ANCPI), the national land-registry agency, alleging theft of cadastre records, internal databases, and source code with ransomware deployment tied to a government IT shutdown. Public tracker material described property-ownership context data with high fraud potential if genuine. ANCPI had not issued a matching public breach confirmation at indexing time. BreachHistory indexes recordsAffected 0 labeled unverified pending Romanian government or regulator attestation.
Root cause
Unverified cybercrime-forum listing by actor bytetobreach alleging Romania's national land-registry agency ANCPI was hit with ransomware and cadastre records plus source code offered for sale—agency had not confirmed at catalog time