Moldova's Electronic Governance Agency (Agenția de Guvernare Electronică, AGE) said on 27 October 2026 that preliminary investigation of the cyberattack on government information systems announced on 24 October shows that between 19 and 23 October about one million personal identification numbers (IDNPs) were queried in attempts to extract personal data without authorisation, and that data sets linked to about 750,000 IDNPs were extracted, according to preliminary estimates (desk translation from Romanian).

AGE says the data may include names, dates and places of birth, first-degree family members, insurance status, family doctor, social benefits, pensions, disability, driving licence, photograph, vehicles and companies owned or managed, and financial information including IBAN, tax debts and MPay payment history, but not every affected person had all categories exposed.

It says bank card data was not affected and investigators found no unauthorised changes to state registers. According to AGE, the attackers exploited vulnerabilities in services accessible without authentication and used the data obtained for further extraction; unauthorised extraction was stopped at 11:30 on 23 October, when 82 public services and more than 30 information systems and admin panels were disconnected as a precaution; a new forced-access attempt was blocked around 02:00 on 25 October and further extraction attempts around 07:00 on 27 October failed (AGE gives no time zone).

The investigation involves the Cybersecurity Agency (ASC), the IT and Cyber Security Service (STISC), the Intelligence and Security Service (SIS), the national data protection centre and police.

On 28 October Prime Minister Vasile Tofan said Moldova is 'the target of coordinated and large-scale cyberattacks' and that the relevant services are investigating the possible involvement of foreign state actors, according to state news agency Moldpres; he said that in about 750,000 cases at least one data element was extracted, which does not mean 750,000 accounts were hacked, and that the use of artificial intelligence allegedly helped the attackers find and exploit the vulnerabilities.

The Record (28 Oct) reports that Moldova has not publicly attributed the attack to any country or group.