Conclusions – not public
As announced by the Ministry of the Interior, the Security Operations Center of the Informatics and Communications Department under the Ministry of the Interior conducted an internal investigation started on April 1 this year regarding the cyber incident related to the leaked resident data from the “Registrų centras”.
Read more Polish «Orlen» Group’s profit – the highest in three years, exceeded all forecasts
Its conclusions are not published.
According to the ministry, based on the findings of this investigation, a Network and Information Systems Continuity Assurance Group was established by order of the Minister of the Interior Vladislavas Kondratovičius. This working group is tasked with assessing potential future risks and providing the minister with recommendations on necessary actions in the field of cybersecurity.
“This incident showed that cyber threats are constantly evolving, so our institutions must act quickly, in a coordinated manner, and strengthen resilience at all levels.
In response to this incident, we are applying additional measures – enhancing monitoring, gathering experts, and conducting an independent audit. Our goal is to ensure that information systems are not only protected today but also technically resilient to future threats,” says Minister V. Kondratovičius.
Hacked via email
15min reminds that law enforcement is investigating the illegal extraction of 600,000 real estate register entries from the Registrų centras. The prosecution informed 15min about it on Friday and soon announced it publicly. Then Prime Minister I. Ruginienė and Minister of Economy and Innovation E. Grikšas publicly demanded the resignation of the head of Registrų centras, Andrius Jusas. He resigned on Monday.
Unauthorized logins from accounts of the Ministry of the Interior or subordinate institutions accessing residents’ Real Estate Register data were recorded from the beginning of January until April.
Law enforcement confirmed that hundreds of thousands of residents’ registry data were stolen by logging into the accounts of Migration Department employees.
15min sources say that access was gained by taking over the email accounts of two Migration Department employees.
Read more Estonia: Putin’s nervousness is dangerous
The Informatics and Communications Department is specifically responsible for the security of the department’s systems and email.
Conducting audits
The Ministry of the Interior states in its announcement that to objectively assess the information security management system, cybersecurity compliance, and related risks, external, independent security audits of the Ministry of the Interior’s information systems are also conducted.
According to the ministry, the first evaluation phase and report are currently awaited. After this report, a second audit phase is planned. Both audit evaluations will provide a consistent independent analysis of the situation.
“It should be noted that employees of the Ministry of the Interior and its subordinate institutions log into email using two-factor authentication. Additionally, employee resilience is tested through social engineering exercises,” the ministry states.
According to the announcement, the Informatics and Communications Department also regularly exchanges relevant information about possible threats with both the National Cybersecurity Center and the Lithuanian Criminal Police Bureau.
Currently, the information systems’ security status and monitoring have been increased – additional alerting rules have been configured and extra security tools obtained from the National Cybersecurity Center have been employed.
The Ministry of the Interior also reminds that since the start of the cyber incident, the Migration Department has actively taken all necessary actions – initiated an internal investigation, cooperated with the National Cybersecurity Center and the State Data Protection Inspectorate.
Read more Vilnius Galleries Weekend 2026 announces dates and invites galleries to join
