Lithuania investigates theft of 600,000 state registry records by foreign actor
2026-05-27T02:51:57Z•cf7640933aed5f65ce534dcf750cf4e78cf0ec8293b1b58d0c28b6c1f0d32f6a
Andrei KozlovCISADutch law enforcementFBIGRU tiesKEVKali365Known Exploited VulnerabilitiesLithuaniaMicrosoft 365OAuthRostecRussiacybercrimedata breachdisinformationexfiltrationphishing-as-a-servicepro-Russian operationssanctions evasionserver seizurestate registryvulnerability reporting
What happened
Multiple cybersecurity developments: Lithuania’s Prosecutor General is investigating a breach in which a foreign actor exfiltrated over 600,000 records from the Centre of Registers (property and legal-entity records). Dutch authorities arrested two men, seized more than 800 servers, and allege they provided infrastructure for pro‑Russian cyberattacks, sanctions evasion, and disinformation operations. Russia appointed Andrei Kozlov—formerly head of a Rostec cybersecurity center and reportedly linked to GRU activities—as an aide to the Security Council secretary. CISA launched a nomination form讓
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- therecord_media
- Record identifier
- cf7640933aed5f65ce534dcf750cf4e78cf0ec8293b1b58d0c28b6c1f0d32f6a
- Enrichment time
- 2026-05-27T02:51:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.