Lithuania investigates theft of 600,000 state registry records by foreign actor

2026-05-27T08:51:53Zbe9ee4ca674bd2422ebc5c86b2342af03328dc108d6dc57c059a7001d83d8098
CISAcredential-theftdata-exfiltrationdisinformationgovernment-breachgruinfrastructure-abusekali365known-exploited-vulnerabilitieslaw-enforcement-actionleadership-appointmentmicrosoft-365oauth-token-theftphishing-as-a-servicerecords-theftrussiasanctions-evasionserver-seizureunauthorized-accessvulnerability-reporting

What happened

Multiple security and cyberintelligence developments: Lithuania is investigating unauthorized access and theft of over 600,000 records from the Centre of Registers (state property and legal-entity records). Dutch authorities arrested two men and seized >800 servers for allegedly providing infrastructure for pro-Russian cyber operations, sanctions evasion, and disinformation campaigns. Russia appointed Andrei Kozlov — linked to a Rostec cybersecurity center with alleged GRU ties — to a Security Council aide role, raising concerns about state-linked cyber coordination. CISA launched a nomination

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
therecord_media
Record identifier
be9ee4ca674bd2422ebc5c86b2342af03328dc108d6dc57c059a7001d83d8098
Enrichment time
2026-05-27T08:51:53Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.