The competent authorities are still trying to assess the scale of the disaster and find those responsible for the most powerful hacker attack, which targeted the CSDD databases. As reported this evening by the TV3 program Nekā personīga, hackers managed to connect and download a huge amount of data through the medical database, that is, through the system used by doctors to submit information to the CSDD based on the results of drivers' medical examinations. CSDD has tried to downplay the scale of the leak and sought help belatedly. Nekā personīga offered viewers a kind of chronicle of events. Night of August 7 to 8 The hacking of the system began two weeks ago. On the night from Friday to Saturday. The work week had ended. IT specialists of the directorate also went on vacation. From August 8 to 10 inclusive All Saturday, Sunday, and even on Monday, the perpetrator is obtaining data from historical payment receipts. He acts unnoticed. Evening of August 10 Only on Monday evening — on the third day after the hacks — does CSDD report the attack to CERT.LV. Before this, CSDD tried to cope with the hack on their own. August 13 On Thursday, CSDD publicly states for the first time that an attack has occurred. It is known that the day before, the head of the Constitutional Protection Bureau informed the head of state about this. On Thursday, it becomes clear what information has been stolen, but the volume is not known. August 14 On Friday, a week after the attack, the scale of the attack is still unclear. August 15-16 At the end of the week, there is another attempt at a targeted attack on CSDD. After the implemented security improvements, it is noticed and blocked. August 17 On Monday, CSDD and CERT.LV analyze the volume of the stolen data. August 18 On Tuesday, on the day when CSDD, supposedly nothing happened, conducts a presentation campaign urging clients to think about security, an extraordinary meeting is convened in the cabinet of ministers. It concludes that CSDD was superficial and negligent in caring for the secure storage of client data. "There are 1.2 million residents there. Personal data, passwords, access possibilities, plus we know that part of society uses the same password or access numbers for both banks and applications, this is actually the most dangerous case in the history of Latvia," commented the chairman of the Saeima National Security Commission, Ainars Latkovskis, to TV3 regarding the situation. Fraud and extortion are one way to use the stolen data. But the information that allows for detailed information about the vehicle fleet of the army and special services carries much greater risks. Politicians, military officials, people working in the BZS, FSB, military police. After all, all these institutions brought their vehicles for technical inspection. Moreover, with the help of artificial intelligence tools, information about family members, property, cars provided in publicly available declarations of officials can be mixed with the stolen CSDD data — exact declared addresses, personal codes, vehicle numbers. It is known that some special services hastily replaced vehicle numbers on the same day that the leak became known. However, for example, KNAB only publicly stated this Thursday that it is "considering" the possibility of changing vehicle registration plates.
