Some of these agencies have vehicles with special identification marks, while others do not. This includes vehicles used for conducting covert investigations or carrying out tasks in the field of national security. The largest agency conducting operational activities is the State Police. The police confirmed to the LETA agency that they sent a request to CSDD to identify risks associated with data on vehicles registered to the police that may have been stolen as a result of the cyberattack. A decision will then be made on the necessity of replacing license plates on certain police vehicles. The Corruption Prevention and Combating Bureau (KNAB) acknowledged that they are currently assessing potential risks but declined to provide further comments. The Internal Security Bureau (IDB) reported that the bureau is constantly taking measures to protect officials and the service vehicles at its disposal. At the same time, the IDB is aware of the risks associated with data leakage as a result of the cyberattack on CSDD and is evaluating the need for additional security measures. Given the specifics of its work, the State Security Service (VDD) implements a range of measures to protect the identity of its employees and to prevent the identification of service vehicles, the agency reported. Such measures are taken regularly, and information about specific actions is subject to protection. At the same time, the VDD confirmed that the service has taken into account the risks associated with unauthorized access to data from the CSDD information system. Since the State Border Guard (VRS) does not have information on whether there has been a data leak regarding its vehicles, and to prevent potential security risks, the border guard is assessing the possibility of taking necessary measures regarding the vehicles used for operational activities, as well as replacing state registration numbers, VRS reported. In turn, the Military Intelligence and Security Service (MIDD) acknowledged that, in accordance with its competence, it is assessing the potential threat and consequences that may arise from the use of data obtained as a result of the cyberattack and will take all necessary measures to mitigate possible risks. Some agencies conducting operational activities have not yet provided the LETA agency with a response regarding their plans for their vehicle fleet.
