Cyber Incident Victim: Bulgarian Food Safety Agency
Date:
Aug 2022
Location:
Bulgaria
Summary
A cyberattack targeted the Bulgarian Food Safety Agency, compromising its website and servers, which rendered all electronic services and functionalities inaccessible. The incident disrupted the agency's operations, preventing it from providing critical digital services to the public following the attack.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Bulgarian Food Safety Agency (BFSA) experienced a cyber attack that disrupted its operations beginning on August 6, 2022. The agency detected the intrusion on that date, which targeted its website and internal servers. This compromise rendered the BFSA’s electronic services fully inaccessible, preventing the agency from carrying out its routine functions. The BFSA publicly confirmed the incident in a press release issued on Monday, August 8, 2022, explicitly attributing the service outage to the cyber attack. No technical details about the attack vector, such as ransomware, phishing, or DDoS, were disclosed in available reports. The agency did not specify whether data theft or encryption occurred, focusing instead on the operational paralysis caused by the incident. The attack’s timing coincided with peak operational hours, though the exact duration of the disruption remains unspecified.

The cyber attack halted the BFSA’s ability to provide its full range of digital services, directly impacting its public-facing operations. No information was released regarding containment measures, forensic investigations, or recovery timelines. The agency’s press release served as its primary public communication, with no supplementary updates or technical bulletins cited in the source material. The incident impaired critical food safety oversight mechanisms reliant on the BFSA’s digital infrastructure, though specific examples of affected services were not elaborated. No third-party claims of responsibility or threat actor attribution were documented in the reported coverage. The BFSA did not disclose whether citizen data or internal communications were compromised during the breach. Service restoration efforts and post-incident adjustments were not detailed in the available public reporting.
