Latvian officials resign after cyberattack exposes data on 1.2 million people

Latvia's Road Traffic Safety Directorate (CSDD) disclosed a "complex" cyberattack that exposed payment receipt records dating back to 2008 and affected more than 1.2 million people and 200,000 businesses. Exposed fields reportedly include personal identification numbers, company registration numbers, vehicle license plates, payment amounts/dates and address data (phone numbers, email addresses and passwords were reportedly not compromised). CERT.LV says attackers exploited an internet-exposed system and used sophisticated, targeted methods; the incident has prompted criminal investigations, political resignations and scrutiny of the agency's IT vendor.