Lithuanian customs says cyberattack may have affected hundreds’ data

A cyberattack on Lithuanian Customs’ information systems may have affected the data of several hundred people and companies, the agency’s acting head told LRT.

Vygantas Paigozinas said the attack appeared targeted and serious, with the attackers seeking not only to access sensitive information but also to cause extensive damage to the wider infrastructure.

“We are talking so far about several hundred people, including individuals and certain companies. They are mostly in Lithuania, though a small number are likely to be abroad,” Paigozinas told LRT Radio on Friday. He said it had not yet been established whether the data of those identified had actually been unlawfully obtained, copied or viewed.

Paigozinas said potentially affected information included names, declared home addresses and contact details, as well as Lithuanian citizens’ personal identification numbers. He said those identified as potentially affected had been notified individually starting on October 11.

The Customs Department said on Wednesday that the personal data of users who accessed the Common User Management Portal on November 9 and 10 may have been affected. Access to the portal has been temporarily suspended. Customs said it detected the incident on November 10 and reported it that evening.

Paigozinas said initial findings indicated the attack was not the work of an inexperienced amateur. He said signs suggested the attackers had tried to reach deeper into system subsections containing more sensitive and extensive data, and may also have sought to damage the wider infrastructure.

Customs advised people to be cautious about emails, text messages and calls requesting personal or financial information, avoid suspicious links and check website addresses carefully. The agency said it had notified Lithuania’s State Data Protection Inspectorate and European Union institutions about the possible data breach, and an investigation was under way.