CSIDB logo
Incident

Bulgarian Food Safety Agency

Incident posture

Attack window
Aug 2022
Location
Bulgaria
Status
Historical
CIA posture
Available to members
Updated
2025-10-17 00:00

Linked entities

Victim
Bulgarian Food Safety Agency
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Aug 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A cyberattack targeted the Bulgarian Food Safety Agency, compromising its website and servers, which rendered all electronic services and functionalities inaccessible. The incident disrupted the agency's operations, preventing it from providing critical digital services to the public following the attack.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

The Bulgarian Food Safety Agency (BFSA) experienced a cyber attack that disrupted its operations beginning on August 6, 2022. The agency detected the intrusion on that date, which targeted its website and internal servers. This compromise rendered the BFSA’s electronic services fully inaccessible, preventing the agency from carrying out its routine functions. The BFSA publicly confirmed the incident in a press release issued on Monday, August 8, 2022, explicitly attributing the service outage to the cyber attack. No technical details about the attack vector, such as ransomware, phishing, or DDoS, were disclosed in available reports. The agency did not specify whether data theft or encryption occurred, focusing instead on the operational paralysis caused by the incident. The attack’s timing coincided with peak operational hours, though the exact duration of the disruption remains unspecified.

The cyber attack halted the BFSA’s ability to provide its full range of digital services, directly impacting its public-facing operations. No information was released regarding containment measures, forensic investigations, or recovery timelines. The agency’s press release served as its primary public communication, with no supplementary updates or technical bulletins cited in the source material. The incident impaired critical food safety oversight mechanisms reliant on the BFSA’s digital infrastructure, though specific examples of affected services were not elaborated. No third-party claims of responsibility or threat actor attribution were documented in the reported coverage. The BFSA did not disclose whether citizen data or internal communications were compromised during the breach. Service restoration efforts and post-incident adjustments were not detailed in the available public reporting.

Sources

Sources available to members: 1 source.

CSIDB