{"id":"lithuania-registers-centre-data-theft-may-2026","category":"breach","status":"closed","title":"Lithuania's Centre of Registers: over 600,000 property and company-register records copied using institutional logins","tldr":"More than 600,000 entries, mainly real-estate register extracts with names and personal codes, were copied from Lithuania's Centre of Registers using other institutions' logins. Residents can check the Centre's portal. No charges or named suspect found as of November 2026.","summary":"Lithuanian prosecutors announced on 22 May 2026 that more than 600,000 entries had been copied from the state Centre of Registers, mainly from the real estate and legal entity registers. The data was taken using logins belonging to institutions authorised to receive it, with several unauthorised logins and access attempts coming from a foreign state, through systems run by other institutions. Press reports say the accounts were Migration Department ones, which officials have not confirmed in the sources read. The Centre says the data was mainly real-estate register extracts with names and personal codes, and that contact details, bank details and transaction documents were not affected. It learned of the breach in April, and the access may have started in January. Suspected accounts were blocked, access was restricted and the Centre's head resigned. Residents were offered a portal tool to check whether they were affected. Prosecutors have not named a state; a Russian link is only an opposition politician's claim. I found no charges, arrests or published findings since late May.","action":"Nothing to install. If you hold Lithuanian property, use the Registers Centre's self-service portal to check whether your data was taken, and be wary of calls or messages that quote your property or personal code.","product":"Lithuania State Enterprise Centre of Registers (real estate and legal entity registers)","audience":"both","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["lithuania","data-breach","government","property-register","credential-abuse","state-actor-suspected","europe"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"news","title":"Lithuania warns mass data leak was work of foreign country","url":"https://www.euronews.com/2026/05/25/lithuania-warns-mass-data-leak-was-work-of-foreign-country","by":"Euronews","date":"2026-05-25"},{"kind":"news","title":"Lithuania investigates massive data breach, suspects foreign intelligence operation","url":"https://www.lrt.lt/en/news-in-english/19/2939056/lithuania-investigates-massive-data-breach-suspects-foreign-intelligence-operation","by":"LRT","date":"2026-05-25"},{"kind":"news","title":"People in Lithuania to be able to check if their registry centre data was stolen","url":"https://www.lrt.lt/en/news-in-english/19/2939178/people-in-lithuania-to-be-able-to-check-if-their-registry-centre-data-was-stolen","by":"LRT","date":"2026-05-25"},{"kind":"news","title":"Duomenų inspekcija: bauda Registrų centrui gali siekti 60 tūkst. eurų","url":"https://www.lrt.lt/naujienos/mokslas-ir-it/11/2941262/duomenu-inspekcija-bauda-registru-centrui-gali-siekti-60-tukst-euru","by":"LRT","date":"2026-05-26"}],"started":"2026-05-22","closed":"2026-05-26","created":"2026-11-03T21:28:24.717Z","updated":"2026-11-03T21:28:24.717Z","cve_notes":[],"timeline":[{"at":"2026-05-26","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"The State Data Protection Inspectorate said it had received over 200 breach reports and would assess whether security was adequate, with a possible fine of up to 60,000 euros. The National Cyber Security Centre classed the incident as major and began a compliance assessment. The Centre said it would add two-factor login. Estimated direct losses are at least 111,000 euros.","url":"https://www.lrt.lt/naujienos/mokslas-ir-it/11/2941262/duomenu-inspekcija-bauda-registru-centrui-gali-siekti-60-tukst-euru","by":"LRT","patch":"na"},{"at":"2026-05-25","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"The acting director said a tool on the self-service portal would let residents check whether their data was among the stolen records. The Centre said the first unauthorised logins reportedly began early in the year and it learned of the breach in April.","url":"https://www.lrt.lt/en/news-in-english/19/2939178/people-in-lithuania-to-be-able-to-check-if-their-registry-centre-data-was-stolen","by":"LRT","patch":"na"},{"at":"2026-05-25","added":"2026-11-03T21:23:52.346Z","kind":"other","text":"Registers Centre head Adrijus Jusas resigned after calls from the Prime Minister and the economy minister, and Giedrius Čininas became acting head. Authorities blocked suspected accounts and restricted access. Opposition MP Laurynas Kasčiūnas said Russian intelligence was behind it, offering no evidence. Prosecutors have not named a state.","url":"https://www.euronews.com/2026/05/25/lithuania-warns-mass-data-leak-was-work-of-foreign-country","by":"Euronews","patch":"na"},{"at":"2026-05-22","added":"2026-11-03T21:23:52.346Z","kind":"disclosed","text":"Lithuanian prosecutors announced a pre-trial investigation into the copying of more than 600,000 entries, mainly from the real estate and legal entity registers, using logins of institutions authorised to receive the data. They confirmed several unauthorised logins and access attempts from a foreign state, but did not name it.","url":"https://www.lrt.lt/en/news-in-english/19/2939056/lithuania-investigates-massive-data-breach-suspects-foreign-intelligence-operation","by":"LRT","patch":"na"}],"url":"https://hard.fyi/live/lithuania-registers-centre-data-theft-may-2026/","json":"https://hard.fyi/api/live?id=lithuania-registers-centre-data-theft-may-2026"}