Moldova’s CNAM national health insurance administrator publicly acknowledged adversary activity in coverage summarized during late April 2026, with reassurance that reimbursement flows largely continued even as investigative outlets contrasted narrower “limited exfiltration” language with cybersecurity-leadership commentary about far larger affected slices of the insurer’s datastore.
The episode matters because compulsory insurance records knit together payout metadata and citizen identifiers—a high-impact surface for scams if substantively leaked.
Canonical record: Moldova CNAM 2026 on BreachHistory.
Sources: The Record, CNAM (RO)