2026 Moldova Electronic Governance Agency — attack on public digital services; data tied to about 750,000 national ID numbers (IDNP) extracted
Data compromised
Per the agency’s list: names, dates and places of birth, first-degree family information, insured status, family doctor, social benefits, pensions, disabilities, driving licences and photographs. Media reports add possible financial data, including IBANs, tax debts and MPay payment history. Authorities say bank card information was not affected.
Technical writeup
The 750,000 figure is a preliminary estimate of national ID numbers (IDNP) whose data sets were extracted, announced by the Electronic Governance Agency on October 27, 2026. Headlines often say 750,000 people; the official unit is IDNP. Authorities suspended 82 digital public services and disconnected more than 30 information systems and admin panels; most services have been restored. Coverage is mainly Romanian-language, translated for this record. companyConfirmed true.
Root cause
Attackers exploited weaknesses in public digital services that can be reached without logging in, then used what they obtained for further extraction. Between October 19 and 23 they tried to reach information tied to about one million IDNPs. Extraction was halted on October 23; further forced-access attempts were blocked on October 25 and 27. The agency has not said who is responsible.