Latvian Political Monitor

@CSDD_LV @Apvienotais_ Sorry, a mistake in spelling Krauze, it should be Uldis Augulis

🚨 CSDD CYBERATTACK — NEGLIGENCE WITH REAL CONSEQUENCES FOR STATE SECURITY — Today about the @CSDD_LV cyberattack, its consequences, and what must be done now. The CSDD board and council have been dismissed. Temporary management will be appointed instead, while competitions for the permanent board and council are started immediately. 🔴 WHAT HAPPENED? ➖️ On August 8 at about 3:00 AM, from Friday to Saturday, an attacker broke into the CSDD system. ➖️ The breach occurred through the CSDD MEDICAL platform, which about 200 doctors use to enter medical certificates for vehicle drivers. ➖️ The attacker operated undisturbed through the system on Saturday and Sunday. ➖️ On Sunday evening, a large-scale data download occurred. ➖️ CSDD only learned of the suspicious activity on Monday. ➖️ On Wednesday, it was established that data theft had occurred. ➖️ The Prime Minister was only informed on Wednesday at 5:00 PM. ❗ HOW WAS THIS POSSIBLE AT ALL? CSDD should have had secure multi-factor authentication. But CSDD MEDICAL access was possible only with a regular username and password. CSDD had every opportunity to implement top-level cybersecurity: 💶 there were financial resources; 💻 there was IT capacity; 🧠 there were knowledge and specialists. Yet self-assurance, negligence, and arrogance toward cybersecurity risks have led to one of the most serious data leaks in state possession. It threatens not only people's privacy but also the security of citizens, businesses, and the state. 📂 WHAT DATA HAS LEAKED? A very large volume of data is concerned: ➖️ data of approximately 1.3 million private individuals; ➖️ data of approximately 200,000 companies; ➖️ payment information for the period from 2008 to 2026; ➖️ first name, surname, or company name; ➖️ personal code or company registration number; ➖️ declared address; ➖️ vehicle state registration number. I do not understand why CSDD needed to store payment data since 2008 on its servers at all, if the regulatory acts do not require such storage. 🛡️ WARNINGS WERE THERE. THEY WERE NOT USED. CSDD had a contract with TET for server and connection cybersecurity, but not for the protection of CSDD's own application and software. Moreover. https://t.co/Y2dCsXsES5 had already offered from January to April 2026 to install its sensors that automatically identify suspicious anomalies in the network. The CERT measure is free. CSDD refused it. ⚖️ A submission has been filed with the prosecutor's office for possible negligence or wrongdoing. Law enforcement authorities must now establish the responsibility of each official. ✅ WHAT DO WE DO NEXT? I have issued a Prime Minister's resolution with 12 specific tasks for ministries and state institutions. Key ones: ➖️ CSDD must inform every affected person and company, indicating what specific data has leaked. ➖️ https://t.co/Y2dCsXsES5 sensors must be mandatorily installed in all critically important state systems so that anomalies are identified in a timely manner, not several days after the breach. ➖️ All critical infrastructure and sensitive data institutions must carry out full-scale intrusion simulations, i.e., penetration tests, to really test system resilience and find weaknesses before an attacker does. ➖️ Instructed to assess the possibility of restricting the freely accessible e-CSDD vehicle number plate check tool. ➖️ Instructed to assess how quickly state systems can abandon the use of the personal code as a username, moving to a more secure identification solution. ➖️ https://t.co/Y2dCsXsES5 has submitted a list of other state institutions that similarly refused the proposed cybersecurity measures. Next week we will go through this list. And the questions will be unpleasant. ⚠️ A MUCH GREATER STATE SECURITY RISK — declarations of officials. Individually, this data is already sensitive. But in combination with other publicly available state databases, it becomes a very effective profiling tool. The declaration information of officials in the VID system is currently freely viewable without user identification. In the era of artificial intelligence, the collection, structuring, and linking of huge amounts of data takes not months, but minutes. This means that such data can be systematically collected and regularly updated also by the services of Russia, Belarus, North Korea, or other countries. By combining CSDD's stolen data with publicly available declarations and other databases, it is possible to profile: 👮 police officers; 🪖 soldiers; 🛂 border guards; 🕵️ security service employees; 🏛️ officials and their families. This is already a national security issue. Declarations must remain accessible to the public, but I see no justification for them being mass-copied anonymously. The solution can be very simple — the information remains public, but access is after authentication, for example, with one's profile at https://t.co/2abj1S4l9U. 🌲 AND I HAVE NOT FORGOTTEN THE @valstsmezi CYBERATTACK. From the Minister of Agriculture @ArmandsKrauze I expect a concrete answer: who in Latvian State Forests was responsible for the systematic failure to update server software, which allowed the attacker to exploit vulnerabilities? Next week I want on the table: ➖️ the name and surname of the responsible official; ➖️ an explanation of how this was allowed; ➖️ information on what consequences and responsibility will follow. 🇱🇻 WE DO NOT LIVE IN A PEACETIME DIGITAL ENVIRONMENT. Latvia lives under constant hybrid threat conditions. Next to us are aggressor states that use all possible methods against our country. At the same time, artificial intelligence has made the preparation, automation, and data processing of cyberattacks much easier. Therefore, the attitude — “surely nothing will happen to us” — is no longer acceptable in public administration. Cybersecurity is not a technical matter for the IT department. It is state security. ❓ AND I ALSO HAVE QUESTIONS ABOUT THE NCC NATIONAL CYBERSECURITY CENTRE. I am interested in how it can be that the National Cybersecurity Centre, which had about 20 million euros in 2025 and about 28 million euros in 2026, has not been able to achieve significantly higher resilience of state systems against such attacks? That is very serious funding. About half of the public television and radio media budget. With such funding, there must also be a measurable result: ✅ how many institutions have actually been tested; ✅ how many vulnerabilities have been eliminated; ✅ in how many systems multi-factor authentication has been introduced; ✅ in how many institutions have https://t.co/Y2dCsXsES5 sensors been installed; ✅ how many real cyberattack simulation tests have been conducted; ✅ and who is responsible if known risks remain unaddressed for years. I have questions. And I expect very concrete answers. Cybersecurity cannot be fixed with presentations, strategies, and reports.

The security of the Saeima elections is ensured by Latvian State Forests, TET and LMT. LVM got hacked themselves, in the CSDD case TET as a service provider failed to protect the data. Now all that remains is to wait what LMT will surprise us with. Maybe now in that purchase affair they will be able to beat the price down substantially?

Consequences of the CSDD cyberattack. Given the massive leak of private and legal data and the potential scale of harm and consequences for the country's residents and national security, I call on the @CSDD_LV board and council to resign from their positions themselves! I suggest you think now not about yourselves, but about the reputation of the institution and the state. https://t.co/IBUOgPQcBg

The guys from CSDD probably don't even really understand what a mess they've made. One thing is the possible use of data for fraud, but another is the loss of trust. Many people will now at least for a while cancel these emails from institutions without even opening them.

🇱🇻🇺🇸 Latvia and the US strengthen cooperation in creating an investment-friendly environment We met with the US Ambassador to Latvia, Melisa Argirosa, to strengthen mutual cooperation, creating a safer legal environment, more effectively combating cross-border crime, and protecting investments. Latvia-US cooperation in the justice sector is a success story that has already yielded concrete results. Latvia has the experience and knowledge to be not only a recipient of support but also a strong partner for the US in combating cross-border crime and strengthening common security. Currently, new challenges are also in our focus: ➡️ sanctions evasion and financial crimes; ➡️ crimes related to crypto assets; ➡️ organized and cross-border crime; ➡️ election security and cyber threats; ➡️ investment protection and a more efficient judicial system. ⚖️ At the Ministry of Justice, we are working towards faster, higher-quality, and more predictable justice, including modernizing courts and digitalizing processes. This is not only a justice issue – it is also strengthening Latvia's business environment and investment attractiveness. I agree with the Ambassador that Latvia has many entrepreneur success stories and good examples, and we need to talk about them and highlight them more! Latvia has something to offer US investors. Our task is to make them see Latvia as a safe, stable, and predictable place to invest and develop businesses. 🇱🇻🇺🇸

So to say – you'll have to live with it now.

I believe that such scumbags, otherwise I can't call them, must be dealt with with all the severity of the law. Including, NBS must be given expanded powers to put such types face down on the ground immediately, until identity is established. They could well have been the so-called little green men. Then we'll see where they can pull strings!

I recommend watching the segment about RailBaltica; in September the government will have to make decisions about what to do next with the project https://t.co/9OWH11Zuic

@ParaTr00per That is not in Latvia's security interests to discuss everything publicly and show in detail the serious failures. There were 5 years to prepare and fix everything, not to do PR.

Day No. 56 in the prime minister's chair – an eclipse in the sky, but the government needs more clarity 🌒☀️

And still hundreds of burned Christian churches around the world - in Canada alone the number is already approaching a hundred… https://t.co/lKQpBxXhsM

I do not deny the importance of such a question, I fully respect such a desire, because the public needs to know. I just feel strange that in the program no questions are asked at all about the priorities of the whole society: No.1 HEALTH, No.2 COST OF LIVING, No.3 ECONOMY, No.4 SECURITY, No.5 EDUCATION, and above all about the budget, deficit, and aligning revenues with expenditures. The first and only question was asked about the Istanbul Convention. Thank you for inviting me as the first, and good luck with the next prime minister candidates.

Day No. 55 in the Prime Minister's seat. A dense day with real work in combating illegal immigration, controlling ministers' work, and evaluating the AirBaltic Strategic Plan. 🐺OPERATION 'VILKATIS' - In the morning, at a press conference we introduced the media to a new operation for the security of Latvia's eastern border. After five years of fighting illegal migrants, we are turning against the causes, not the consequences - using human resources and equipment more effectively. The Cabinet of Ministers today decided to establish a special working group, coordinating actions with Lithuania, Estonia, Poland and other countries in the region. If specific measures take place in a particular area, residents will be informed. Thanks for cooperation to the Interior and Defense ministers. We prove once again that only by working as a strong team can we achieve a result. Why the name 'VILKATIS'? Because it's Latvian and with strength. Strange interview @letanewslv - the questioning of PM candidates 'WHAT WAS THAT AT ALL?' - I want to ask what that really was??? It's good that politicians are made to report, but somehow there was totally a lack of even one question about the future, about what I plan to do... I still don't understand what they wanted to tell the viewer. https://t.co/kKbJUSOE97 📋 MINISTERS TOP3 WORKS PROGRESS - At the action discussion we reviewed the implementation of priority works. 7 priority measures completed, 26 activity results - from cooperation with Ukraine in the defense sector to reducing medicine prices and a decision on hospital network reorganization. In September, 9 more are planned to be completed. We have left a lot to the last moment, BUT positively, the ministers approach it with responsibility. The most important task for the ministers is to complete ALL works before the elections. I told the ministers - I am available if support is needed. There is little time. We must focus on priorities. That's why there is no more time for populism and topics that are not Cabinet-level issues. If the approach doesn't change - in the future I will include only Declaration issues in Cabinet meetings, because this government's term of office is limited. ✈️ AIRBALTIC - In the closed part of the government meeting, we heard the Transport Ministry's report on AirBaltic. A good plan for me means five specific things: private partners provide new financing, the state maintains significant participation, Riga remains the main base, no new state financing is needed, and a strategic investor is attracted. If these five conditions are met - that is a plan the market also believes in, not just one that looks good on paper. Is that how it is now? In any case, the company must be put back on 'solid feet'. The current problems are the result of ill-considered decisions made in previous years. After that followed many different questions that we discussed in both the open and closed parts of the meeting. I will share some of them. 🙋 NOT ALLOW VOLUNTEER WORK AT BUSINESSES? - We discussed such a proposal. In my opinion, absurd!!!! Young people want practice, are ready to work without remuneration - that's exactly how they gain experience. With such a regulation we exclude the possibility to do so, for example, helping to organize concerts, festivals or sports events, etc. Currently there is no generally regulated form of how a young person can gain experience in a company without an employment contract. But should volunteer work be banned altogether because of that? All that needs to be done to remove shadow economy risks is for SRS to develop a solution. 📜 PUBLIC BENEFIT ORGANIZATION LAW - This made me smile. One organization demands paid membership in a commission, the establishment of which is determined by the Saeima. The purpose of the law - to reduce the bureaucratic burden, simplifying the approval of commissions. FULLY SUPPORT. But SRS already has its own control mechanism. It is clear that SRS can decide independently. Also without a commission. 💻DIGITAL GOVERNANCE - In the government, together with Edgars Tavars and VARAM we continued improving Digital Services. We agreed in the Cabinet of Ministers on the European digital identity 'wallet' (EDIM) - a voluntary tool that will not fully replace identity documents, but will include e-address functionality. 🏗️We approved VARAM's initiative in procurement, the possibility to use ready-made, market-available solutions. This will allow trying out the rarely used 'design dialogue' procurement form. ⚠️'SILENE' AND 'VIENTUĻI' equipping feasibility - We heard Transport Minister Rihards Kozlovskis. The project is good, but I am concerned about the ICT costs that add up. The task - SM together with FM, IeM and VARAM to evaluate the costs.

The path to reconciliation begins with a conversation! 🗣️ Justice is not only punishment. Justice is also the opportunity to turn responsibility into change. Today in Victory Park we launched the “The path to reconciliation begins with a conversation” campaign by @Tieslietas and @probacija and a large-format street art piece created especially for it. Why is it important to talk about this? Because society's attitude shows a significant contradiction. 📊 89% of Latvia's residents believe that after an offense a person should be given the opportunity to change and live an honest life. 📊 84% believe everyone deserves a second chance if they have taken responsibility for their actions. 📉 However, only 32% believe that the majority of probation clients are motivated to change their lives and not repeat the offense. Meanwhile, 53% see public condemnation of probation clients. These numbers raise an important question – do we really believe that a person can change after a mistake? An offense is not simply an everyday mistake. One must take responsibility for what has been done. But responsibility does not mean only serving the punishment. It also means acknowledging what was done, listening to the victim, reducing the consequences of the offense, and doing everything to ensure the offense is not repeated. Because our goal is not only to make sure a person receives punishment for what they did. Our goal must also be to ensure they never repeat this offense again.

Starting today, the illegal immigrant interception operation 'VILKATIS' is being launched, involving border guard, police, armed forces, and service personnel. Purposeful cooperation between @janisdombrava and R.Melnis @AizsardzibasMin. The operation will be coordinated by the KVC (Crisis Management Centre) under my supervision. Together we must demonstrate that we can stop the hybrid attack of 🇷🇺 and 🇧🇾 migrants on our state border. The activities of migrant organisers will be purposefully combated - transport, asylum organisation, coordination. We will ask international allies to stop the global financing model of the network. We will regularly inform the public about progress, every Tuesday after the Cabinet of Ministers. We ask residents to be understanding when encountering greater presence of services and checks. Please do not worry if you see more intensive drone and transport presence in the border area and elsewhere. If you have questions or see suspicious activity - report to 112