← Back to context

Comment by Squarex

1 day ago

The same thing happened to Slovakia not that long ago.

The Slovak land register was hacked in January 2025. Hackers uknown encrypted the database, asking for an undisclosed 7-figure amount as ransom.

The whole country's real estate market was paralyzed for about a month. It took couple of months to restore everything from backups and paper agenda and resume normal operation of the land register office.

It was the largest cyber attack in Slovakia's history. The authorities to this day haven't provided any information on who might be behind it. The investigation is still ongoing. Several government figures including the PM were however very eager to immediately point on Ukraine, without any sort of proof.

  • If I remember correctly, this is the hack that Fico tried to blame on Ukraine, even if the hackers were a known Russian ransomware crew that literally posted in their Telegrams about their support for Russia... right?

    • fico is russian crony for a long time. On purpose he made the country very dependent on russian oil and especially gas, more than any other EU country (maybe with exception of hungary). 4 years into the war and no migration to other sources is planned so he can every winter go back to blocking things due to .

      At this point he is just subverting EU on putin's whims. Stealing half of EU funds evidently wasn't enough for him, plus he can see some protection in the east, west has only future jail for him. If one country should be kicked out right now, it should be this one.

Accounts at the time:

"1T+ in assets are frozen as Slovakia's Land Registry faces ransomware attack" <https://www.infosecurity-magazine.com/news/slovakia-hit-by-l...> (10 January 2025)

Apparently tied to Ukraine in this case.

  • > Apparently tied to Ukraine in this case.

    Lord no! That accusation doesn't pass the sniff test.

    Try looking further east for the real culprits.

    • Ukraine was specifically mentioned in two of the articles I'd referenced, though not in the one originally submitted to HN. I was dubious finding it once, hedged with "apparently" based on the 2nd. I did look for a Wikipedia article on the event which might have included a more substantive and reflective post mortem but didn't find one.

      If you've specific information clearing or establishing the link, post it. I agree that hasty accusations are risky. The main point I was looking to establish was that the source wasn't indicated as Algerian, as with the Romanian incident.

      2 replies →

how did they solve it?

  • it took months to go back fully online. they also had usable backups (so they used those for the data), but the infrastructure had so many vulnerabilities that they had to fix it first, hence the delay