Data Breach in Latvia Affects Over 1.2 Million Citizens

Unknown individuals have stolen personal data of more than 1.2 million citizens through a cyberattack on the Latvian Road Traffic Authority. Prime Minister Kulbergs described the agency's security measures as "IT security infantilism." He called for comprehensive actions to improve cybersecurity in government institutions. Kulbergs emphasized that such incidents not only undermine citizens' trust in the government but can also jeopardize national security. The Latvian Road Traffic Authority has promptly initiated an investigation into the incident. Experts have been brought in to clarify the exact circumstances of the attack.

Initial analyses suggest that the hackers may have exploited vulnerabilities in the agency's IT infrastructure. The Latvian government has announced that it will inform the affected citizens about the security breach. An information letter will educate citizens about the nature of the stolen data and possible steps to secure their personal information. Authorities advise citizens to closely monitor their accounts and personal data. The incident has also attracted international attention.

Cybersecurity experts warn that such attacks on government institutions in Europe may increase. Latvia is not the only country facing such threats, and the need for stronger cooperation among EU states is becoming increasingly clear. The Latvian government plans to revise IT security policies and introduce new standards. These measures aim to ensure that similar incidents can be prevented in the future. Experts also call for enhanced training of employees in public institutions to raise awareness of cybersecurity risks.

The Latvian police have launched an investigation to identify the perpetrators. However, there are currently no indications of the hackers' identity or their motivation. Authorities have also requested support from international partners to conduct a comprehensive investigation into the incident. The implications of the data breach could be far-reaching. Citizens whose data is affected may become targets of identity theft or fraud.

Consequently, the Latvian government has also informed the Financial Supervisory Authority to assess potential risks to the financial system. On August 17, 2026, the Latvian Road Traffic Authority issued an official statement confirming the incident and outlining ongoing damage control measures. The agency emphasizes that it is doing everything possible to ensure the security of its citizens' data.