Moldova Restores Seven More Digital Services; 14 Remain Offline

Moldova has restored another seven government digital services following a cyberattack in October, bringing the number returned to normal operation to 68 out of 82 that were suspended for additional security checks, the country's E-Governance Agency said on 5 November 2026. That leaves 14 services not yet restored, down from 21 in the agency's 30 October update.

The new figures mark a measurable change since TFNOS's earlier report on the 21 unavailable services. The earlier account recorded 61 services back online. The latest announcement does not establish that all affected information systems are secure or that investigators have finished assessing the data taken during the incident.

Six of the newly restored functions are provided by the National Food Safety Agency. They cover export quality certificates for planting and propagation material, product health certificates, bee-queen breed and biological-value certificates, certificates for non-commercial pet travel, and seed-quality or domestic seed-analysis documents. The seventh is the digital tachograph card service provided by the National Road Transport Agency.

The E-Governance Agency said the restored services were available through the government's EVO app and portal after security assessments involving the Cybersecurity Agency, the Information Technology and Cybersecurity Service, and the service providers. It said monitoring and investigation of the incidents recorded from 19 to 23 October were continuing, with the remaining functions to return gradually after checks.

The restoration is also occurring amid a broader government review of cyber defences. Moldova's state news agency Moldpres reported on 5 November that President Maia Sandu had convened the National Security Council for a meeting scheduled at 10:00 on Friday, 6 November, to examine measures to strengthen state cybersecurity and protect digital government services. The presidency had scheduled a briefing for 12:30. The announcement of a meeting does not establish what decisions the council ultimately made; a subsequent official account is needed before reporting any adopted measures.

The original breach remains a separate unresolved public-accountability question. On 30 October, the E-Governance Agency said officials were still checking which data had been extracted without authorisation and preparing a method to notify affected people individually. The agency said that, in checks conducted to that date, it had not identified further extraction from its systems during subsequent attempted attacks or unauthorised alterations to citizens' data in state registers. Those statements were preliminary, not a final forensic clearance.

The immediate verified development is service restoration: seven more functions available and 14 still offline as of the 5 November update. The next material follow-ups are the remaining services' restoration, a confirmed outcome of the 6 November security meeting, and validated findings about affected data and individual notifications.