CSDD has received more than 2,500 compensation claims following August cyberattack

RIGA - The Road Traffic Safety Directorate (Celu Satiksmes Drosibas Direkcija, CSDD) has received approximately 2,500 compensation claims following a cyberattack on the CSDD on August 8, during which personal data of multiple individuals and legal entities were compromised, Martins Malmeisters, head of the CSDD's Communications Department, told LETA.

The CSDD has received approximately 2,500 requests for compensation via various email addresses, to which the CSDD has responded individually.

The average compensation claim is around EUR 10,000, said Malmeisters.

The investigation into the cyberattack is ongoing, said Malmeisters. As to the compensation claims, the decision of the Data State Inspectorate will be decisive, he explained.

According to the relevant regulations, an individual may receive compensation if it is determined that the CSDD has failed to fulfill its obligations and the individual has suffered harm as a result.

It is currently too early to request compensation, and customers will be informed of the next steps, said Malmeisters. At the same time, the CSDD continues to evaluate additional measures that could be implemented to mitigate potential harm.

As reported, CSDD suffered a cyberattack on the night of August 8, during which the personal data of 1.2 million individuals and the data of approximately 200,000 legal entities were compromised. The data were obtained from payments made to the agency over the past 18 years.

Both the CSDD council and the company’s board of directors announced their resignations on Wednesday, August 19.

At the same time, Transportation Minister Rihards Kozlovskis (JV) has called for an internal probe to be conducted on an expedited basis to clarify all the circumstances and identify those responsible in connection with the cyberattack and the massive data breach. Among other things, the investigation must also evaluate the CSDD contract with Tet for the provision of cybersecurity services.

CSDD is a state-owned joint-stock company. The agency registers vehicles in Latvia, issues driver’s licenses, conducts vehicle inspections, and provides other services. The Ministry of Transport is the shareholder of the CSDD.