Hackers claim to have targeted Road Infrastructure Agency (RIABulgaria’s and gained access to data of more than 100,000 users and around 1,000 employees through the LIMA system. The group told Nova News that it is in possession of personal profiles, which include names, phone numbers, email addresses and vehicle information. However, RIA denied that any attack was carried out or that any personal data was leaked.
According to the agency, no breach was found in the LIMA system, which is accessible only through a browser. It also said that the platform no longer requires registration or data entry, while any information provided in the past was optional and is not considered sensitive personal data.
See also: Lazarus hackers breached six organizations in South Korea
Despite the denials, there are indications of a possible data leak. Cybersecurity expert Hristian Daskalovexplained that such data breaches often result from old data being sold on the dark web. He also noted that large volumes of personal data can be created through artificial intelligence, which can quickly generate millions of names and ID numbers that look like real people.
Daskalov warned that even if the leak does not involve highly sensitive information from Bulgaria's Road Infrastructure Agency (RIA), it could lead to an increase in phishing attacks, primarily targeting agency employees. Personal data can be bought for a small fee and used for spam campaigns or other scams.
See also: Frederick Health: Data breach affects nearly 1 million patients
The Chairman of the Bulgarian Personal Data Protection Commission (CPDP), Ventsislav Karadzhov, stressed that personal data is divided into general (such as names, phone numbers and addresses) and sensitive (such as biometric data), with the latter requiring stricter protection. He also underlined that all data controllers are obliged to report any security breach within three days of its discovery.
This incident highlights several critical issues regarding the security of personal data and the vulnerability of organizations to cyberattacks. The RIA case shows that, despite the agency’s assurances that there was no breach, the indications of a potential leak remain worrisome. The report by Hristian Daskalov that data, even if not particularly sensitive, can be used for phishing attacks and other scams is particularly significant. Phishing attacks are often the first way hackers use to exploit personal data and expand their attacks.
See also: US DOGE reportedly hacked
Furthermore, the emphasis placed by authorities on the correct categorization of personal data and the stricter protection of sensitive information shows the importance of properly managing and protecting this data, especially when individuals themselves are not fully aware of the risks they may be exposed to.
Transparency and accountability in cases of cyberattacks are fundamental to building trust and avoiding further malicious actions.
Overall, this incident highlights the ongoing challenge organizations face in protecting their data from sophisticated threats, while also underscoring the need for increased training and preparation to detect and respond to such attacks.
Source: www.novinite.com
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
