The facts
AGE reported attempts against datasets linked to about one million personal identification numbers between 19 and 23 October; it said unauthorized extraction was stopped on 23 October and follow-up attempts on 25 and 27 October were blocked. [1]
Prime Minister Vasile Tofan said preliminary data indicated that at least one information item had been extracted in about 750,000 cases. He stressed that this did not mean 750,000 complete accounts were compromised. [2]
Tofan said authorities were investigating possible foreign-state involvement but did not name a country or actor. RFE/RL quoted the Cybersecurity Agency chief saying it was premature to make a definitive attribution. [2][3]
AGE said bank-card data were not compromised and no unauthorized state-register changes had been identified in its assessment. [1]
AGE reported 61 of 82 assessed public digital services were restored and 21 remained temporarily unavailable as of 30 October; it said there had been no new extraction at that update. [4]
Still unconfirmed
- The identity of the attackers and any state involvement remain unestablished.
- The exact number of people affected, precise data elements extracted in each case and any later misuse remain unknown.
- Current availability of the 21 services reported offline on 30 October has not been established in the sources reviewed.
Sources
References support the numbered facts above. Source checks: 3 Nov 2026, 18:59 UTC.
AGE provides first-party incident and recovery details; the prime minister’s 3 November remarks are reported by MOLDPRES; RFE/RL independently reports the incident and quotes the Cybersecurity Agency chief. The estimate concerns cases with at least one extracted data item, not 750,000 complete accounts. No actor is attributed.
- Approximately one million IDNPs targeted in personal-data extraction attempts
Electronic Government Agency of Moldova (AGE) · Primary source · 27 Oct 2026
Opened the official account: attacks were recorded 19–23 October, extraction was stopped on 23 October, and follow-on attempts on 25 and 27 October were blocked.
- Prime Minister on cyberattack targeting public digital services: authorities investigate possible foreign actors
MOLDPRES State Information Agency · Reporting · 3 Nov 2026
Opened 3 November report quoting Prime Minister Vasile Tofan: preliminary data indicate at least one information element was extracted in about 750,000 cases; he said investigators are examining possible foreign-state involvement without naming an actor.
- Moldovan president calls security meeting after massive data breach
Radio Free Europe/Radio Liberty · Reporting · 29 Oct 2026
Opened independent report quoting the Cybersecurity Agency chief, who said attribution was premature, and covering the National Security Council response and service assessment.
- 61 public digital services restored after cyberattack; 21 remain temporarily unavailable
Electronic Government Agency of Moldova (AGE) · Primary source · 30 Oct 2026
Opened 30 October follow-up: AGE said 61 of 82 checked services were online and 21 remained unavailable; it reported ongoing attempts but no further extraction at that update.