A new data breach incident has come to light. A mysterious hacker (or group of hackers) managed to steal the personal information of millions of Bulgarian citizens. He then sent the stolen data to local media.
According to initial information, the hacker found this data from the country's National Revenue Agency (NRA), which is part of Bulgaria's Ministry of Finance.
The agency (NRA) published a message on its official website yesterday, stating that there had indeed been a breach and that an investigation had already been launched with the Ministry of the Interior and the National Security Agency.
Hacker stole 110 databases
Local media, which obtained a portion of the stolen data, reported that the hacker claimed to have stolen the personal information of 5 million Bulgarians. It should be noted here that the country's total population is about 7 million.
The hacker boasted of stealing 110 databases (about 21 GB) from the NRA network. So far, 57 databases (11 GB) have been leaked to local media, but he promised to share the rest in the coming days.
The data includes names, personal identification numbers (PINs), home addresses and financial information. Most of the information is quite old (from around 2007), but newer entries were also discovered in the databases .
The databases also contained data from other government agencies, which contain information such as social security numbers and more.
Other information found belonged to the Bulgarian customs service.
In addition, there was some data that, according to local media, belonged to the National Health Insurance Fund.
The hacker contacted local media via a Yandex.ru email address and wrote: " government is stupid. Your cybersecurity is a travesty."
Opposition parties in Bulgaria wasted no time. Within hours of the leak being published, the Democratic Party demanded the resignation of Finance Minister Vladislav Goranov.
