Lithuania Investigates B2B Credential Misuse Exposing 600,000 National Registry Records

Lithuanian authorities are investigating a data breach involving the unauthorized copying of over 600,000 records from the State Enterprise Centre of Registers. The attack exploited valid B2B credentials from the Department of Migration, allowing threat actors to bypass security measures and extract sensitive data, including personal identification details and property registry information. The breach was detected in April 2026, leading to the revocation of compromised accounts and the resignation of the Centre’s director. Official attribution remains unconfirmed.