The Moldovan National Party (PNM) is calling on the Government to launch an independent investigation, identify the vulnerabilities exploited and those responsible for potential security failures, and individually notify citizens affected by the theft of personal data, TRIBUNA reports.

“More than 750,000 citizens of the Republic of Moldova have been affected by one of the most serious cyberattacks on government information systems. According to information provided by the authorities, their personal data was extracted without authorization following the exploitation of vulnerabilities in the state’s electronic services. We are talking about information concerning identity, family members, family doctors, pensions, social benefits, property ownership and financial circumstances. This data could be exploited for years for fraud, blackmail and identity theft. It represents a serious blow to the security and privacy of citizens of the Republic of Moldova,” the party stated.

The Moldovan National Party expressed deep concern over the severity of the incident and the risks faced by citizens.

“According to the Electronic Governance Agency, $46 million has been invested in two major digitalization projects over the past 15 years, while in 2025 alone, the institution reported expenditures of 96.75 million lei across three budget lines. How was it possible that, despite such investments, state systems still had vulnerabilities that attackers could exploit? Who verified their security, and who is responsible for protecting citizens’ data?

The PNM demands that the Government conduct an independent investigation, identify the vulnerabilities exploited and those responsible for potential security failures, and individually notify affected citizens. The Republic of Moldova has specialized institutions, appointed management teams and allocated budgets for managing and protecting its digital infrastructure, and responsibility cannot be concealed behind press releases.

If negligence or violations of security obligations are established, resignations and sanctions must follow in accordance with the law. A cyberattack may originate from abroad, but the obligation to protect citizens’ information lies with the state,” the party stated.