# Hacker wipes Romania's land registry database

After failed extortion attempt, hacker deletes country's entire property records.

- **Source:** [Hacker News (news.ycombinator.com)](https://brifing.si/source/13c923cd-6d99-442b-9b8b-1181f4d8cd91)
- **Published:** 2026-07-20
- **Topic:** [Business](https://brifing.si/c/business)
- **Original article:** <https://news.risky.biz/risky-bulletin-hacker-wipes-romanias-entire-land-registry-database/>
- **On Brifing:** https://brifing.si/s/368329f1-f184-424a-8732-8eac9c2f955a

## The crisis begins

Romania's cadastre agency ANCPI was targeted by a hacker demanding ransom. After refusal, the hacker used valid credentials to wipe all land registry data and backups, paralyzing the country's real estate market.

## Immediate impacts

Official apps and websites remain offline for a week. Notaries can't record transactions while citizens can't obtain property deeds. Email servers were also compromised in the attack.

## Hacker's footprint

Using the alias ByteToBreach, the hacker sold ANCPI's employee credentials, internal documents and network details on a forum. This same hacker breached Sweden's e-government portal earlier this year.

## Hacker identified

Security firm KELA doxxed the hacker as Zakaria Mahdjoub from Oran, Algeria. This revelation will significantly aid Romanian authorities in their investigation.

## Recovery efforts

ANCPI restored its website with a message announcing complete network rebuild. Though backups were allegedly deleted, the agency appears to have maintained an offline copy.

## Global pattern

Romania joins Poland, Slovakia, Greece, Morocco, Russia and Ukraine as countries that suffered land registry hacks in recent years.

## AI-powered Hugging Face breach

An autonomous AI agent was used to hack Hugging Face, stealing internal datasets and cloud credentials. The platform's AI guardrails ironically hindered their own investigation.

## Coca-Cola ransomware attack

Coca-Cola suspended production at Fairlife dairy subsidiary after ransomware hit US facilities. Canadian operations remained unaffected.

## Qantas social engineering

Last year's Qantas breach stemmed from hackers impersonating IT staff to access systems, compromising 5.7 million customer records through the CRM platform.

## Suno music scraping allegations

Hacked documents suggest Suno's AI music generator trained on millions of songs scraped from YouTube Music and Deezer, fueling ongoing copyright lawsuits.

## WINDTRE fined

Italy's telecom provider WINDTRE received €1.7M fine for security failures leading to last year's breaches.

## Broader implications

Romania's crisis exposes critical vulnerabilities in government systems worldwide. The pattern of land registry attacks demands urgent cybersecurity overhauls across public sectors.

## Sources covering this story

- https://news.risky.biz/risky-bulletin-hacker-wipes-romanias-entire-land-registry-database/ — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._