Voter data safe: CEC assures State Register of Voters was not compromised after cyberattack
The Central Electoral Commission (CEC) announces that the recent cybersecurity incident targeting several state digital public services has not affected electoral information systems or voter data.
"The integrity, confidentiality, and availability of voters' personal data have not been compromised; the continuity of electoral process administration—including the operation of the State Register of Voters—remains ensured," the CEC announced in a press release.
According to the central electoral authority, protecting voter data and securely managing information systems are institutional priorities.
"The Central Electoral Commission reaffirms its commitment to ensuring the security of the information infrastructure it manages, thereby contributing to the smooth conduct of electoral processes and the strengthening of public trust," the institution concluded.
Personal data of approximately 750,000 citizens compromised
The CEC's announcement follows a large-scale cyberattack that occurred between October 19 and 23 and targeted several government information systems.
As a result of the incident, the personal data of approximately 750,000 citizens was accessed and extracted without authorization. The stolen information includes names, personal identification numbers (IDNP), family-related data, pension records, driver's license details, and certain financial information.
After discovering the breach, the E-Governance Agency (AGE) ordered an audit of 82 digital services and temporarily suspended vulnerable components. The unauthorized data extraction was halted on October 23 at 11:30 AM, though further access attempts continued until October 26. Several citizens were unable to access their personal accounts on the EVO portal on the evening of October 26, while others reported unauthorized access to their personal data—specifically information regarding civil status records, property, and other details.
Several state institutions, including the Cybersecurity Agency (ASC) and the Intelligence and Security Service, are investigating the incident.
Potential increase in fraud attempts and telephone scams
Authorities have assured citizens that their banking information and property remain secure. Payment platforms (such as MPay and EVO) have not been compromised; furthermore, simply knowing an IBAN or accessing a real estate registry does not enable the transfer of funds or property.
Serghei Diaconu, Director of the National Crisis Management Center, stated on the Moldova 1 television channel that the direct risks to citizens are currently very low. He cautioned, however, that scammers could exploit the stolen data to gain people's trust.
Meanwhile, security expert Andrei Curăraru warned that the large volume of stolen data could be used to ramp up fraud attempts and phone scams. He urged the public to exercise extreme caution and to refrain from sharing sensitive information or codes with strangers—even those claiming to represent banks or state institutions.
