Moldova Says 21 Digital Public Services Remained Offline After Data-Extraction Attack

Moldova's E-Governance Agency said on 30 October 2026 that 21 public digital services remained temporarily unavailable following a cyberattack on government systems, even as 61 services had been restored through the EVO portal. The agency said security checks were continuing and that officials were preparing a way to notify people whose personal information may have been extracted without authorisation.

The updated service count provides a measurable account of recovery from the incident, which the government first publicly described on 24 October. The National Cybersecurity Agency's 27 October preliminary account said attackers queried approximately one million personal identification numbers between 19 and 23 October, and that datasets associated with roughly 750,000 identification numbers were estimated to have been extracted. Those figures are preliminary and describe identification-number-linked datasets, not a verified final count of distinct individuals notified or of every data field compromised.

The cybersecurity agency said 82 digital services and more than 30 information systems or administration panels were disconnected as a precaution on 23 October. It reported that the unauthorised extraction was halted that day, while further attempted access was detected and blocked. The investigation into the scope of the incident remains open. The agency warned that exposed information could be misused in fraud attempts, while saying bank-card information had not been compromised through the government platforms.

In its 30 October update, the E-Governance Agency said subsequent attempted attacks were still being detected, but that its checks had not found further unauthorised extractions from systems it managed. Officials also said checks to date had not identified unauthorised alteration of citizens' data in state registers. This is a reported finding within an ongoing investigation, not proof that every connected service has been exhaustively cleared.

The electoral implications require a separate distinction. Moldova's Central Electoral Commission told the public on 28 October that its electoral information systems and State Register of Voters had not been affected. Public broadcaster Moldova 1 reported that assurance alongside the wider government incident. A reported exposure of other state data does not establish compromise of the voter register, and the commission's assurance does not erase the wider breach.

The remaining public-accountability questions concern when all services will safely return, which categories of data were actually taken, how many people will receive individual notice, and what the technical review finds about the underlying weaknesses. The government says the restoration and notification process is continuing; further findings should be assessed against subsequent official disclosures and independent reporting.