How stolen credentials and known vulnerabilities brought Romania's land registry to a standstill

On 14 July 2026 Romania's national land registry (ANCPI/e-Terra) suffered a preventable cyberattack that took internal services (including email and the cadastre application) offline, froze property transactions nationwide, and resulted in limited data exfiltration and reported destruction of systems and backups; DNSC attributes the incident to an access broker using leaked credentials and exploitation of known, unpatched vulnerabilities (no zero-day) with stolen artifacts posted for sale by an actor calling itself ByteToBreach.