Hearings on cyberattacks against state information systems held at Moldova's parliament

Chisinau, November 4, 2026 – The parliament’s commission for national security, defence and public order has heard representatives of the relevant institutions regarding cyberattacks against state information systems. The meeting was held behind closed doors, in order to avoid jeopardizing the investigation. At the end of the hearings, the commission’s chair, MP Lilian Carp presented the main conclusions at a news briefing.

According to the commission’s chair, the cyberattack took place during October 19- 23, 2026, and a criminal case has been opened in connection with it. During the four-day period, more than 6 million access attempts were recorded through multiple IP addresses and accounts, with approximately 750,000 data sets accessed. The MP noted that the number of access attempts did not correspond to the number of individuals affected, as the same profile may be accessed multiple times. The government is currently conducting an audit, in order to establish the exact number of citizens whose data was accessed.

Lilian Carp asked the responsible institutions to explain why they had not intervened when they detected a number of access attempts far higher than usual.

“Law enforcement institutions have been advised to examine all aspects of how this cyberattack occurred and who was behind it, because an attack of this kind, carried out in a rather ‘silent’ manner, raises many questions about how the institutions coordinated with one another when they noticed such a high number of access attempts,” Lilian Carp said. He noted that dozens or even hundreds of cyberattack attempts took place in Moldova daily and are detected by the competent authorities.

 

The commission’s chair stressed that the government logging service MLog, which ensures the preservation of records and the traceability of all actions, would allow the exact reconstruction of how unauthorized access to the databases of Moldova was got. According to Lilian Carp, it is currently known that the attack was carried out from multiple IP addresses used to generate fake IDNPs.

“At this stage, it is known that this cyberattack was carried out from outside Moldova, but further investigations are needed, because some of the IP addresses used have been identified in more exotic countries. It is therefore necessary to determine by whom these IP addresses were purchased, in order to identify the main orchestrator behind the cyberattack. What follows is for law enforcement authorities to identify not only who carried out the cyberattack, but also who is responsible for failing to react when the number of access attempts was so high, that it should have attracted the attention of the representatives of the law enforcement institutions,” said Lilian Carp, chair of the commission for national security, defence and public order.

Representatives of the Information and Security Service, the Prosecutor General’s Office, the Interior Ministry, the Economic Development and Digitalization Ministry, the Information Technology and Cyber Security Service, the National Center for Personal Data Protection, the Cybersecurity Agency, the Public Services Agency and the e-Governance Agency attended the hearings.





Fereastră în fereastră (iframe)

Communication and Public Relations Directorate of Moldova’s Parliament