Representatives of Tet and the Road Traffic Safety Directorate (CSDD) will hold a board-level meeting on Wednesday to discuss the circumstances of the recent cyberattack and further measures to enhance the protection of IT infrastructure. This was reported by Tet's Chairman Uldis Tatarčuks. The meeting comes after public statements by CSDD's head Aivars Aksenoks, who previously stated that Tet, responsible for monitoring part of the directorate's IT infrastructure, did not detect the attack and did not warn the client about it. According to Tatarčuks, specialists from Tet, together with CSDD, Cert.lv, and other involved organizations, are continuing a technical investigation. The company has already held several working meetings and exchanged information with cybersecurity experts. Tet emphasizes that it is too early to draw conclusions about the causes of the incident. It is necessary to establish how the attack was carried out, when it occurred, and why the attackers were able to access the data. In fact, it is a matter of determining at what stage the failure occurred and which systems were affected. Only after the analysis is completed will it be clear what conclusions can be drawn regarding the performance of the protection and monitoring measures. Commenting on the accusations against the company, Tatarčuks noted that cyberattacks on Latvian organizations occur daily. According to him, some of them are completely prevented, some lead to isolated incidents, and some have serious consequences. He also explained that the contract with CSDD covers a wide range of services, including the provision and maintenance of server infrastructure; however, Tet is only responsible for the part of the systems specified in the contract. The company did not disclose further details about the contract's content. Tet also confirmed that it engaged two subcontractors—Corporate Systems and Kyndryl Latvia—to fulfill the contract. Both companies are involved in providing services under the contract, but the distribution of specific responsibilities is not disclosed. It should be noted that, according to Aivars Aksenoks, it was CSDD specialists who independently discovered the cyberattack and were able to stop it within a few hours. At the same time, as the head of the directorate claims, no warning from Tet was received at the time of the attack, despite the contract stipulating round-the-clock monitoring of the infrastructure. According to the Electronic Procurement System data, a five-year contract between CSDD and Tet for servicing the IT infrastructure of the state vehicle register was concluded in 2022 for nearly 9 million euros excluding VAT. In 2025, its value was increased to 9.043 million euros. The cyberattack occurred on the night of August 7 to 8. As a result, the attackers stole personal data of 1.2 million people and information about approximately 200,000 legal entities. Following the incident, the board first announced its resignation, and then the CSDD council did as well. The investigation into the circumstances of the attack is ongoing. Its results will determine not only the assessment of the contractors' actions but also potential changes in the protection system of state information resources.
