Latvian Political Monitor

@desdae1 @CSDD_LV @Apvienotais_ There will be a separate story about TET, but there everything points to interesting internal processes at CSDD, which is very interesting...

🚨 CSDD CYBERATTACK — NEGLIGENCE WITH REAL CONSEQUENCES FOR STATE SECURITY — Today about the @CSDD_LV cyberattack, its consequences, and what must be done now. The CSDD board and council have been dismissed. Temporary management will be appointed instead, while competitions for the permanent board and council are started immediately. 🔴 WHAT HAPPENED? ➖️ On August 8 at about 3:00 AM, from Friday to Saturday, an attacker broke into the CSDD system. ➖️ The breach occurred through the CSDD MEDICAL platform, which about 200 doctors use to enter medical certificates for vehicle drivers. ➖️ The attacker operated undisturbed through the system on Saturday and Sunday. ➖️ On Sunday evening, a large-scale data download occurred. ➖️ CSDD only learned of the suspicious activity on Monday. ➖️ On Wednesday, it was established that data theft had occurred. ➖️ The Prime Minister was only informed on Wednesday at 5:00 PM. ❗ HOW WAS THIS POSSIBLE AT ALL? CSDD should have had secure multi-factor authentication. But CSDD MEDICAL access was possible only with a regular username and password. CSDD had every opportunity to implement top-level cybersecurity: 💶 there were financial resources; 💻 there was IT capacity; 🧠 there were knowledge and specialists. Yet self-assurance, negligence, and arrogance toward cybersecurity risks have led to one of the most serious data leaks in state possession. It threatens not only people's privacy but also the security of citizens, businesses, and the state. 📂 WHAT DATA HAS LEAKED? A very large volume of data is concerned: ➖️ data of approximately 1.3 million private individuals; ➖️ data of approximately 200,000 companies; ➖️ payment information for the period from 2008 to 2026; ➖️ first name, surname, or company name; ➖️ personal code or company registration number; ➖️ declared address; ➖️ vehicle state registration number. I do not understand why CSDD needed to store payment data since 2008 on its servers at all, if the regulatory acts do not require such storage. 🛡️ WARNINGS WERE THERE. THEY WERE NOT USED. CSDD had a contract with TET for server and connection cybersecurity, but not for the protection of CSDD's own application and software. Moreover. https://t.co/Y2dCsXsES5 had already offered from January to April 2026 to install its sensors that automatically identify suspicious anomalies in the network. The CERT measure is free. CSDD refused it. ⚖️ A submission has been filed with the prosecutor's office for possible negligence or wrongdoing. Law enforcement authorities must now establish the responsibility of each official. ✅ WHAT DO WE DO NEXT? I have issued a Prime Minister's resolution with 12 specific tasks for ministries and state institutions. Key ones: ➖️ CSDD must inform every affected person and company, indicating what specific data has leaked. ➖️ https://t.co/Y2dCsXsES5 sensors must be mandatorily installed in all critically important state systems so that anomalies are identified in a timely manner, not several days after the breach. ➖️ All critical infrastructure and sensitive data institutions must carry out full-scale intrusion simulations, i.e., penetration tests, to really test system resilience and find weaknesses before an attacker does. ➖️ Instructed to assess the possibility of restricting the freely accessible e-CSDD vehicle number plate check tool. ➖️ Instructed to assess how quickly state systems can abandon the use of the personal code as a username, moving to a more secure identification solution. ➖️ https://t.co/Y2dCsXsES5 has submitted a list of other state institutions that similarly refused the proposed cybersecurity measures. Next week we will go through this list. And the questions will be unpleasant. ⚠️ A MUCH GREATER STATE SECURITY RISK — declarations of officials. Individually, this data is already sensitive. But in combination with other publicly available state databases, it becomes a very effective profiling tool. The declaration information of officials in the VID system is currently freely viewable without user identification. In the era of artificial intelligence, the collection, structuring, and linking of huge amounts of data takes not months, but minutes. This means that such data can be systematically collected and regularly updated also by the services of Russia, Belarus, North Korea, or other countries. By combining CSDD's stolen data with publicly available declarations and other databases, it is possible to profile: 👮 police officers; 🪖 soldiers; 🛂 border guards; 🕵️ security service employees; 🏛️ officials and their families. This is already a national security issue. Declarations must remain accessible to the public, but I see no justification for them being mass-copied anonymously. The solution can be very simple — the information remains public, but access is after authentication, for example, with one's profile at https://t.co/2abj1S4l9U. 🌲 AND I HAVE NOT FORGOTTEN THE @valstsmezi CYBERATTACK. From the Minister of Agriculture @ArmandsKrauze I expect a concrete answer: who in Latvian State Forests was responsible for the systematic failure to update server software, which allowed the attacker to exploit vulnerabilities? Next week I want on the table: ➖️ the name and surname of the responsible official; ➖️ an explanation of how this was allowed; ➖️ information on what consequences and responsibility will follow. 🇱🇻 WE DO NOT LIVE IN A PEACETIME DIGITAL ENVIRONMENT. Latvia lives under constant hybrid threat conditions. Next to us are aggressor states that use all possible methods against our country. At the same time, artificial intelligence has made the preparation, automation, and data processing of cyberattacks much easier. Therefore, the attitude — “surely nothing will happen to us” — is no longer acceptable in public administration. Cybersecurity is not a technical matter for the IT department. It is state security. ❓ AND I ALSO HAVE QUESTIONS ABOUT THE NCC NATIONAL CYBERSECURITY CENTRE. I am interested in how it can be that the National Cybersecurity Centre, which had about 20 million euros in 2025 and about 28 million euros in 2026, has not been able to achieve significantly higher resilience of state systems against such attacks? That is very serious funding. About half of the public television and radio media budget. With such funding, there must also be a measurable result: ✅ how many institutions have actually been tested; ✅ how many vulnerabilities have been eliminated; ✅ in how many systems multi-factor authentication has been introduced; ✅ in how many institutions have https://t.co/Y2dCsXsES5 sensors been installed; ✅ how many real cyberattack simulation tests have been conducted; ✅ and who is responsible if known risks remain unaddressed for years. I have questions. And I expect very concrete answers. Cybersecurity cannot be fixed with presentations, strategies, and reports.

Day No. 58 in the prime minister's chair (Friday) - DeFacto; Bank of Latvia; Aglona; Auto Union V16...

🇱🇻 My strong conviction is that the Latvian language must remain independent also in the era of artificial intelligence. The future of the language today is determined not only by how many people speak it, but also by how fully it is represented in the digital environment. 🤖 For artificial intelligence to be able to understand and use Latvian qualitatively, we need: • quality and reliable language data; • unified and modern terminology; • quality translations; • digital language tools. During a visit to the State Language Center (@_vvc) we discussed that it is therefore essential to use and develop the language resources that have been built and accumulated in Latvia for years. Latvian must not become a language that technologies understand worse than others. We must ensure that Latvian can be fully used also in artificial intelligence solutions and in the digital tools of public administration. Investment in language data today is an investment in the independence of the Latvian language tomorrow. 🇱🇻

Here officials must answer criminally for what they have done, and then maybe Graf's excellent corporate governance inserts will finally feel that there are no 'sacred cows'. The question is only how to measure material losses - possibly clients will start demanding compensation. https://t.co/xlRVdN9pCc

Consequences of the CSDD cyberattack. Given the massive leak of private and legal data and the potential scale of harm and consequences for the country's residents and national security, I call on the @CSDD_LV board and council to resign from their positions themselves! I suggest you think now not about yourselves, but about the reputation of the institution and the state. https://t.co/IBUOgPQcBg

The guys from CSDD probably don't even really understand what a mess they've made. One thing is the possible use of data for fraud, but another is the loss of trust. Many people will now at least for a while cancel these emails from institutions without even opening them.

🇱🇻🇺🇸 Latvia and the US strengthen cooperation in creating an investment-friendly environment We met with the US Ambassador to Latvia, Melisa Argirosa, to strengthen mutual cooperation, creating a safer legal environment, more effectively combating cross-border crime, and protecting investments. Latvia-US cooperation in the justice sector is a success story that has already yielded concrete results. Latvia has the experience and knowledge to be not only a recipient of support but also a strong partner for the US in combating cross-border crime and strengthening common security. Currently, new challenges are also in our focus: ➡️ sanctions evasion and financial crimes; ➡️ crimes related to crypto assets; ➡️ organized and cross-border crime; ➡️ election security and cyber threats; ➡️ investment protection and a more efficient judicial system. ⚖️ At the Ministry of Justice, we are working towards faster, higher-quality, and more predictable justice, including modernizing courts and digitalizing processes. This is not only a justice issue – it is also strengthening Latvia's business environment and investment attractiveness. I agree with the Ambassador that Latvia has many entrepreneur success stories and good examples, and we need to talk about them and highlight them more! Latvia has something to offer US investors. Our task is to make them see Latvia as a safe, stable, and predictable place to invest and develop businesses. 🇱🇻🇺🇸

Day No. 55 in the Prime Minister's seat. A dense day with real work in combating illegal immigration, controlling ministers' work, and evaluating the AirBaltic Strategic Plan. 🐺OPERATION 'VILKATIS' - In the morning, at a press conference we introduced the media to a new operation for the security of Latvia's eastern border. After five years of fighting illegal migrants, we are turning against the causes, not the consequences - using human resources and equipment more effectively. The Cabinet of Ministers today decided to establish a special working group, coordinating actions with Lithuania, Estonia, Poland and other countries in the region. If specific measures take place in a particular area, residents will be informed. Thanks for cooperation to the Interior and Defense ministers. We prove once again that only by working as a strong team can we achieve a result. Why the name 'VILKATIS'? Because it's Latvian and with strength. Strange interview @letanewslv - the questioning of PM candidates 'WHAT WAS THAT AT ALL?' - I want to ask what that really was??? It's good that politicians are made to report, but somehow there was totally a lack of even one question about the future, about what I plan to do... I still don't understand what they wanted to tell the viewer. https://t.co/kKbJUSOE97 📋 MINISTERS TOP3 WORKS PROGRESS - At the action discussion we reviewed the implementation of priority works. 7 priority measures completed, 26 activity results - from cooperation with Ukraine in the defense sector to reducing medicine prices and a decision on hospital network reorganization. In September, 9 more are planned to be completed. We have left a lot to the last moment, BUT positively, the ministers approach it with responsibility. The most important task for the ministers is to complete ALL works before the elections. I told the ministers - I am available if support is needed. There is little time. We must focus on priorities. That's why there is no more time for populism and topics that are not Cabinet-level issues. If the approach doesn't change - in the future I will include only Declaration issues in Cabinet meetings, because this government's term of office is limited. ✈️ AIRBALTIC - In the closed part of the government meeting, we heard the Transport Ministry's report on AirBaltic. A good plan for me means five specific things: private partners provide new financing, the state maintains significant participation, Riga remains the main base, no new state financing is needed, and a strategic investor is attracted. If these five conditions are met - that is a plan the market also believes in, not just one that looks good on paper. Is that how it is now? In any case, the company must be put back on 'solid feet'. The current problems are the result of ill-considered decisions made in previous years. After that followed many different questions that we discussed in both the open and closed parts of the meeting. I will share some of them. 🙋 NOT ALLOW VOLUNTEER WORK AT BUSINESSES? - We discussed such a proposal. In my opinion, absurd!!!! Young people want practice, are ready to work without remuneration - that's exactly how they gain experience. With such a regulation we exclude the possibility to do so, for example, helping to organize concerts, festivals or sports events, etc. Currently there is no generally regulated form of how a young person can gain experience in a company without an employment contract. But should volunteer work be banned altogether because of that? All that needs to be done to remove shadow economy risks is for SRS to develop a solution. 📜 PUBLIC BENEFIT ORGANIZATION LAW - This made me smile. One organization demands paid membership in a commission, the establishment of which is determined by the Saeima. The purpose of the law - to reduce the bureaucratic burden, simplifying the approval of commissions. FULLY SUPPORT. But SRS already has its own control mechanism. It is clear that SRS can decide independently. Also without a commission. 💻DIGITAL GOVERNANCE - In the government, together with Edgars Tavars and VARAM we continued improving Digital Services. We agreed in the Cabinet of Ministers on the European digital identity 'wallet' (EDIM) - a voluntary tool that will not fully replace identity documents, but will include e-address functionality. 🏗️We approved VARAM's initiative in procurement, the possibility to use ready-made, market-available solutions. This will allow trying out the rarely used 'design dialogue' procurement form. ⚠️'SILENE' AND 'VIENTUĻI' equipping feasibility - We heard Transport Minister Rihards Kozlovskis. The project is good, but I am concerned about the ICT costs that add up. The task - SM together with FM, IeM and VARAM to evaluate the costs.

🇱🇻 The security and efficiency of the justice system directly affect every resident of Latvia. Our priority is to create a justice environment that is safe, modern, and able to operate continuously even in crisis conditions. At the same time, investments must help prevent the causes of crime, reduce recidivism, and provide people with faster and more convenient services. That is why in the next period's investment portfolio, security, resocialization, digital resilience, and service quality are interconnected priorities. That is why we have identified an investment need of €140.4 million for the next EU funds period. Our priorities: 🔹 more modern and secure prison infrastructure; 🔹 less recidivism by strengthening resocialization; 🔹 cybersecurity and artificial intelligence solutions in the justice sector; 🔹 creation of a safe home for children and youth; 🔹 more modern forensic examinations; 🔹 development of e-case and faster digital services. More: https://t.co/k5By05hoxQ

The child must be at the center of the entire child protection system. That is why the role, responsibility and cooperation of each institution must be clearly defined. 🤝 The orphan's court should not be the first institution to become involved in solving family problems. Its main task should be to protect the rights and interests of children, as well as persons in guardianship and custody. At the same time, careful consideration should be given to which functions should be retained in the orphan's court and which could be provided by other institutions. I believe that a unified information system is also needed to identify risks in time and coordinate support for the child and the family. I met with Baiba Meldere on these issues. Thank you for her long-term work in the orphan's court, accumulated experience and valuable conversation!

The electronic procurement system is being actively improved, as well as communication technology services and solutions in procurement, so that taxpayers do not overpay for various services in this field. https://t.co/NRqQyAvXa8

🇱🇻🤝🇱🇹 Latvia and Lithuania are united by much more than a shared border. We are united by the Baltic Sea, people, and common goals. Together with Lithuania's Minister of Justice Rita Tamašunienė and the leadership of Liepāja state city municipality – Council Chairman Gunārs Ansiņš and his deputy Jānis Džeriņš – we discussed how to strengthen Latvia–Lithuania cooperation: investment attraction and regional development. I am glad to see that Lithuanian entrepreneurs continue to invest in Latvia. A modern health and SPA center will be built in Liepāja by the sea, while also restoring the historic Bath House. Such projects strengthen not only the economy but also the partnership between both countries. Liepāja is a special place for Latvia–Lithuania friendship – about 40% of the city's foreign visitors are tourists from Lithuania. This confirms that our cooperation is alive not only between governments, but also between people. During the meeting, we also discussed child safety in the digital environment. We agree that age restrictions alone are not enough. Greater responsibility of digital platforms, more effective age verification solutions, and closer cooperation between state institutions are needed so that children are truly safe in the digital environment.

A court ruling must be not only fair, but also implemented in a timely manner! ⚖️ That is why, together with the Latvian Council of Sworn Bailiffs, we continue to improve the court ruling enforcement system: ✅ reducing bureaucracy by simplifying the debt recovery process in cases of company restructuring; ✅ promoting wider use of the e-address to speed up document flow and reduce costs; ✅ improving the regulation to prevent evasion of court ruling enforcement. The goal is clear – faster, more efficient and fairer enforcement of court rulings, which strengthens trust in the rule of law and reduces the administrative burden for both citizens and businesses.

Less bureaucracy, faster services and a modern state administration – these are the concrete results we are working on together with the State Land Service. Upcoming improvements: ✅ from 1 October, information about shelters will be available on the portal https://t.co/XnsMopgSXs, providing residents with more convenient access to civil protection information; ✅ with the 'Vietvaris' project, the coordination of place names and addresses will be shortened from the current 2–3 months to about 10 days. At the same time, we continue to improve the unified building registration process and strengthen the capacity of @ZemesDienests, developing modern infrastructure in the regions. The State Land Service has proven that with innovation, digitalization and high cybersecurity standards it is possible to create more efficient public services for the benefit of society.

ℹ️ Since July 1, the first fully automated court process in the compulsory enforcement warning procedure has been in operation in Latvia. In simple and undisputed cases it allows decisions to be made faster, while judges can devote more time to hearing complex cases. The Court Administration (@tiesuadm) has outlined the next priorities for court digitalization. After the successful completion of the second development phase of e-case, we continue to improve the Court Information System, strengthen cyber security and develop digital services. E-case is not just a technology project. It is a change that makes court work more efficient, services more accessible and strengthens public trust in the rule of law. At the same time, we continue to strengthen the resilience of the judicial system: ➡️ we are improving cyber security solutions; ➡️ developing solutions for the continuity of court work; ➡️ continuing to implement the reform of court assistants. The goal is a modern, secure and efficient judicial system that works for the people.

It is important to put the procurement system in order, making it transparent, reducing expenses in the long term. I met with @RTU_LV prorector @Arturs_Zeps and professor @AgrisNikitenko, who have done a great job to effectively use artificial intelligence solutions in procurement evaluation https://t.co/0JBDynEvP3