CSDD in Latvia receives about 1,400 requests after cyberattack
Following a cyberattack and data leak at Latvia’s Road Traffic Safety Directorate (CSDD), the agency received about 1,400 inquiries related to the incident, including compensation claims. This was reported by LSM English, citing Latvian Television.
Calls to wait before filing claims
Ready-made templates for compensation applications are being circulated on social media. At the same time, CSDD urged people not to rush with such claims and to wait for the results of the State Data Inspectorate’s investigation.
CSDD spokesperson Mārtiņš Malmeistars said that the agency reviews and responds to all applications received, regardless of whether they were signed with an electronic signature or sent by email. According to him, there are currently no grounds for further action regarding these claims. CSDD also warned citizens against paid offers to prepare compensation applications.
The State Data Inspectorate does not award compensation. If a dispute over payments arises, it will have to be resolved in court. The inspectorate noted that, in practice, the review of priority cases usually takes from four to nine months.
More current news is available on the UA.News Telegram channel Telegram.
A claim for 10,000 euros
Lawyer Lauris Klāģišs is seeking compensation of 10,000 euros from CSDD. He said that the data obtained by the perpetrators included his exact home address. According to Klāģišs, concerns about his family’s physical safety prompted him to demand accountability from CSDD and the state. The lawyer published a template of his application online free of charge.
Klāģišs believes that CSDD will not agree to pay compensation voluntarily, so he will likely have to apply to administrative courts. He also does not consider it necessary to wait for the completion of the State Data Inspectorate’s review before filing a claim.
Changing login details
After the incident, few people inquired about replacing vehicle registration plates, including free replacement. CSDD does not plan to introduce such an option.
Instead, eParaksts mobile users were advised to change their login number if it is their personal identification number, which also fell into the hands of the perpetrators. They are offered to replace it with a system-generated combination of digits. About 1% of users have already done so, although all of them received the notification. Smart-ID also uses a personal identification number, so users of both services are advised not to confirm authentication requests that they did not initiate.
