Latvia loses data on 1.2 million citizens in road agency breach

Latvia's road traffic agency has confirmed a cyberattack that exposed personal data connected to approximately 1.2 million people—roughly two-thirds of the country's population. The breach targeted the national vehicle registration system, prompting immediate calls for accountability at the highest levels of government.

Senior officials have resigned in the wake of the incident, though the agency has not disclosed the full scope of compromised data or the identity of the threat actors. The attack represents one of the largest data exposures in the Baltic state's history, affecting a majority of its 1.9 million residents.

The breach underscores persistent vulnerabilities in government IT infrastructure across smaller European states, where legacy systems and constrained budgets often leave agencies exposed. Latvia has faced mounting pressure to modernize its digital defenses, particularly as regional tensions with Russia have elevated the cyber threat landscape.

• 01Latvian citizens face elevated identity fraud and phishing risks from exposed registry data.
• 02Regional governments may face pressure to audit vehicle and transport database security.
• 03Political leadership changes could delay or accelerate planned cybersecurity modernization efforts.
• 04Threat actors now possess demographic and location data useful for surveillance targeting.