Latvian forestry company still restoring systems weeks after ransomware attack

LVM, Latvia's state-owned forestry company, is still restoring IT systems after a ransomware attack that disrupted internal and customer services and led to the public disclosure of roughly 44 GB of stolen data. CERT.LV attributes the intrusion to a financially motivated foreign ransomware group that exploited an unpatched system and also compromised a server at pharmaceutical firm Olpha; investigators report prolonged access but no ransom demand, and they found Latvia's election infrastructure was developed separately and shows no evidence of compromise.