Cyber Incident Victim: LT72
Date:
Mar 2025
Location:
Lithuania
Summary
The PAGD reported that a link providing access to information on the extreme situation preparation website was disconnected and the spread of information was stopped, with its IT specialists investigating to determine the cause of the cyber incident. The director said the institution reacted immediately, IT specialists were engaged, and a decision was made to cut off the source of damage to prevent further harm, while noting that the nature and depth of the intrusion remain unclear. He added that no pre‑trial investigation has begun, but responsible and interested institutions have been informed and a decision on possible proceedings will be considered early next week. The department also clarified that the LT72 application for public preparation for extreme situations operates independently and is not related to it.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Saturday morning, March22, 2025, the PAGD recorded a cyber incident affecting a website associated with extreme situation preparedness. The department reported that the link used to access information on the site was disconnected to halt further dissemination of data. PAGD IT specialists were immediately engaged to investigate the situation and determine the cause of the breach. Director Renatas Požėla stated that the institution began reacting right away, with specialists working to clarify what damage had been done. He noted that he could not specify how the incident manifested and that the depth of the intrusion was still unknown. The team’s priority was to isolate the source of harm to prevent any additional impact.
As of the article’s publication, no pre‑trial investigation had been initiated, but PAGD had informed the responsible and interested institutions about the incident. A decision on whether to launch a pre‑trial investigation was expected to be made on the following Monday. The department also emphasized that the LT72 program, which had begun operating in March to prepare the population for extreme situations, is technologically unrelated to the compromised website. According to PAGD, the LT72 application functions autonomously, without disturbances, and is protected by the highest cybersecurity standards.