Rinkēvičs calls for CSDD leadership to leave after cyberattack

Latvia’s president, Edgars Rinkēvičs, said the leadership of the Road Traffic Safety Directorate, or CSDD, should not remain in office after an August cyberattack that exposed the personal data of 1.2 million people, LSM reported.

“CSDD’s reputation and public trust in the institution have been damaged. Under these circumstances, CSDD leadership must not continue its work,” Rinkēvičs wrote on X.

He described the attack on CSDD’s information systems and the large-scale data leak as a significant threat to national security. Rinkēvičs called for a full investigation, rapid efforts to limit the consequences and a radical improvement in the security of the institution’s IT systems.

Prime Minister Andris Kulbergs instructed Transport Minister Rihards Kozlovskis, as the state representative responsible for CSDD, to assess the actions and responsibility of the institution’s board and council in relation to cybersecurity management, the introduction of required security measures and the response to the incident.

Kozlovskis said he had ordered an official inquiry into the responsibility of CSDD board and council members for the personal data obtained in the cyberattack. The inquiry is to be completed within a shortened timeframe, with its results submitted to the minister in early September.

Cert.lv said the attack exploited a vulnerability in a CSDD system accessible via the internet. Several mandatory cybersecurity requirements had also not been followed.

The head of CSDD has said he does not plan to resign.