Lithuania investigates theft of 600,000 state registry records by foreign actor
2026-05-26T20:51:57Z•1081e565442111598b3d8996f27e158521b627d525df04eac608eb3bf5f090e4
CISAFBIGRUKEVKali365Known Exploited VulnerabilitiesLithuaniaMicrosoft 365OAuth token theftRussiaTelegramarrestsdata breachdisinformationforeign actorinfrastructure providerslaw enforcementphishing-as-a-servicesanctions violationsserver seizurestate registrystolen recordsvulnerability reporting
What happened
Multiple security developments: Lithuanian authorities are investigating unauthorized access to over 600,000 records from the national Centre of Registers, attributed to a foreign actor. Dutch investigators arrested two men and seized more than 800 servers for allegedly providing infrastructure that supported pro‑Russian cyber operations, sanctions violations and disinformation campaigns. Russia appointed Andrei Kozlov, a cybersecurity executive with alleged GRU ties, to a Security Council aide role. CISA launched a nomination form to allow researchers and vendors to request additions to its “
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- therecord_media
- Record identifier
- 1081e565442111598b3d8996f27e158521b627d525df04eac608eb3bf5f090e4
- Enrichment time
- 2026-05-26T20:51:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.