VIDEO | How hackers got access to Moldovans' personal data. Expert: There could have been negligence, or manipulation, or someone with legitimate access was tricked

The cyberattack that compromised the personal data of approximately 750.000 citizens of the Republic of Moldova could involve a state actor or groups of hackers with advanced technological capabilities, claims security expert Iulian Chifu. He does not rule out the involvement of structures associated with Russian secret services. During the show "In context" on Moldova 1, the analyst also spoke about the possible use of artificial intelligence, as well as about the technical assistance provided to the authorities in Chisinau by specialists from Romania.

Chifu emphasized that not only the attack itself must be analyzed, but also how the attackers managed to exploit the vulnerabilities of the computer systems. One of the hypotheses is that the attackers took advantage of human error, improper management of access to information, or the compromise of a person who had legitimate access rights.

"It's not just about the attack itself. There was certainly negligence, or mishandling, or trickery by someone who had legitimate access there. I don't know yet. I know that even the Romanian DSCU with STS and Cyberint are working and have provided technical assistance. The legitimate authorities in Chisinau are the ones making the necessary assessments. We will see the result. But what we know for sure is that the ability to use artificial intelligence prepared at this level belongs to states or intermediary hackers. APT28 and APT29 (ed. note: cyber espionage groups supported by the Russian state) of Russia, SVR, Guerrero, respectively, or other hacker structures that have access to these capabilities. But keep in mind, the fact that they use a very important and evolved technology, which has the ability to exploit vulnerabilities, does not mean that there was not a door somewhere that was opened by someone who normally should have been trained to be prepared." 

Between October 19 and 23, several state computer systems were attacked by hackers, who managed to obtain personal data associated with approximately 750.000 citizens. Among the information accessed are names, dates of birth, family information, pensions and some financial data. To stop the attack, authorities temporarily disconnected dozens of public services. For now, it is not known who is behind the attack, and authorities are also investigating the possible involvement of foreign state actors.