Cyberattack on digital public services: authorities block about 11 million access requests

Authorities have stopped a cyberattack targeting several digital public services of the Republic of Moldova, during which about 11 million access requests were recorded with the aim of unlawfully obtaining personal data. The investigation is ongoing to establish all the circumstances of the incident.

According to Government spokesperson Dumitru Ciorici, the Republic of Moldova was the target of a cyberattack that affected the availability of some online services and could be part of hybrid attacks against the country.


“We also experienced a cyberattack in recent days. As a result, some online services became unavailable. The attack targeted a number of the state’s digital public services, with approximately 11 million access requests recorded. We suspect it is part of the hybrid attacks against the Republic of Moldova. The situation is under investigation,” said Dumitru Ciorici.


According to the Electronic Governance Agency (AGE), the Information Technology and Cyber Security Service (STISC), and the Cybersecurity Agency (ASC), the attack occurred during the night of October 22. Authorities detected unusual activity involving access to digital public services and data queries.

As a preventive measure, the targeted services were disconnected, and the Police and the National Center for Personal Data Protection were informed of the incident.

Security work is currently continuing, including over the weekend. As a result, some digital services or platforms may be temporarily unavailable or difficult to access.

Authorities warn that personal data could be used in fraud attempts. Scammers may pose as representatives of public institutions, banks, or other organizations and may cite individuals’ names and national identification numbers to gain their trust.

Citizens are urged not to disclose passwords, authentication codes, or other confidential information and not to authorize transactions at the request of unknown individuals. Caller’s knowledge of personal data does not confirm that they represent an official institution.

Authorities say they will provide additional information as the investigation progresses and confirmed results become available.