Lithuanian migration department denies system breach after unauthorised registry access

The head of Lithuania’s Migration Department has confirmed that unauthorised individuals accessed the country’s Registers Centre (RC) by impersonating department employees, though no breach of the department’s own systems occurred, LRT reports.

Director Indrė Gasperė told journalists on Friday that the intruders connected to the RC’s information systems “by mimicking Migration Department staff.” She stressed, however, that “there is currently no evidence that our department’s employees were involved or that our systems were compromised.”

According to Gasperė, the attackers used genuine email addresses and passwords belonging to department staff. An ongoing investigation aims to determine whether employees inadvertently exposed their credentials or if they were obtained through other means.

The incident follows reports that unauthorised parties accessed RC data after submitting a query about a citizen’s assets. Lithuanian authorities have launched a probe into the cybersecurity breach, which involved sensitive registry information.