Lithuania investigates theft of 600,000 state registry records by foreign actor
2026-05-26T14:51:51Z•ae423928df70ea5b4772adcee257c0f7aa313e4278c8272efc0db2962576396c
Andrei KozlovCISAFBIGRUKali365Known Exploited VulnerabilitiesLithuaniaMicrosoft 365OAuth token theftRussiaTelegram-based malware/servicecybercrimedata breachdisinformationinfrastructure seizurelaw enforcement arrestsphishing-as-a-servicerecord theftsanctions evasionservers seizedstate registryvulnerability disclosure
What happened
Multiple cybersecurity developments: Lithuania’s Prosecutor General is investigating a breach in which a foreign actor stole over 600,000 records from the Centre of Registers (state property and legal-entity records). Dutch authorities arrested two men and seized 800+ servers for allegedly providing infrastructure to pro‑Russian cyber operations, violating sanctions and supporting disinformation campaigns. Russia appointed Andrei Kozlov, a cybersecurity executive with alleged GRU ties, to a Security Council aide role. CISA opened a nomination channel for researchers and vendors to propose bugs
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- therecord_media
- Record identifier
- ae423928df70ea5b4772adcee257c0f7aa313e4278c8272efc0db2962576396c
- Enrichment time
- 2026-05-26T14:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.