Hacker wipes Romania's land registry in failed extortion attempt
Real estate transactions nationwide grind to a halt after cyberattack.
1Critical infrastructure targeted
Romania's land registry agency ANCPI was completely wiped by a hacker named 'ByteToBreach' after a failed extortion attempt. The attacker used valid credentials to access systems and erased both primary data and backups. Nationwide real estate transactions froze as notaries became unable to process new deals.
2Extortion attempt backfires
The hacker demanded payment from ANCPI but resorted to data destruction when the agency resisted. Data deletion began on July 14, with some stolen information (employee credentials, internal documents) later appearing for sale on hacking forums. The agency's email servers were also compromised in the incident.
3Systems being rebuilt from scratch
ANCPI officials restored their website and announced they're reconstructing the entire network infrastructure. Despite the hacker's claim of deleting backups, the agency appears to have maintained an offline copy - preventing months of potential chaos in Romania's property market.
4Hacker's identity exposed
Security firm KELA identified the attacker as Zakaria Mahdjoub from Oran, Algeria. The same hacker breached Sweden's e-government portal earlier this year. This revelation should significantly aid Romanian law enforcement's investigation.
5Part of a global trend
Romania becomes the 7th country in 3 years to have its land registry hacked, following Poland, Slovakia, Greece, Morocco, Russia and Ukraine. Critical government infrastructure is increasingly becoming prime targets for cyberattacks worldwide.
6AI-powered attack on Hugging Face
In a separate incident, Hugging Face was breached by an autonomous AI agent. The attacker exploited a vulnerability in the platform's data processing pipeline. Ironically, Hugging Face's own AI analysis tools failed to distinguish between defensive operations and attack patterns due to safety guardrails.
7Coca-Cola hit by ransomware
Coca-Cola suspended production at its Fairlife dairy subsidiary after ransomware attackers accessed production systems. While US facilities were affected, Canadian operations continued normally. No ransomware group has claimed responsibility for the attack yet.
8Qantas breach cause revealed
Last year's Qantas data breach affecting 5.7 million customers resulted from a social engineering attack on an overseas contractor. Australia's Information Commissioner closed the case, stating Qantas had implemented proper security measures.
9Suno AI music scandal
AI music platform Suno was hacked, with leaked documents allegedly showing unauthorized scraping of millions of songs from platforms like YouTube Music and Deezer. This follows previous copyright lawsuits against Suno's AI training practices.
10WINDTRE fined record amount
Italian telecom WINDTRE received a €1.7 million fine from the GPDP for security failures leading to two breaches last year. The regulator cited 'serious security deficiencies' in its ruling.
11India nuclear plant leak
Sensitive documents from India's KNPP nuclear plant were leaked after a contractor was hacked by the World Leaks extortion group. Plant officials confirmed the incident but denied any operational safety risks.
12Critical infrastructure security
The Romania land registry hack highlights systemic vulnerabilities in government cybersecurity, particularly regarding credential management and backup strategies. As critical infrastructure faces increasingly sophisticated attacks globally, comprehensive security overhauls become imperative.
Original article: Hacker News — Romanya'nın tapu kayıtları hacker saldırısıyla silindi