Latvian Police Arrest Suspected Hacker in Electronics Repair Company Data Breach

Arrest and Allegations

Latvian police arrested a 23-year-old man on September 15, suspected of hacking at least two companies. The suspect allegedly stole personal information and attempted to extort money from the victims. He faces up to five years in prison if convicted.

Targeted Companies and Methods

One of the affected companies is TSC, an electronics repair firm belonging to the Latvian telecommunications group LMT. The first attack was detected in February, with a second, similar incident at TSC in early September. The suspect reportedly exploited vulnerabilities in company websites to gain unauthorized access to databases and extract data. He then contacted the companies via anonymous email, demanding payment to prevent disclosure of the stolen information.

Investigators believe the suspect used automated hacking tools to scan for security weaknesses rather than targeting specific companies. He also employed digital tools to conceal his location.

Stolen Data and Impact

TSC disclosed that the stolen information potentially included customers' names, contact details, device passcodes, bank account numbers, addresses, and building access codes, depending on what customers had provided. The company has not specified the number of affected customers or the exact vulnerability exploited. Investigators stated that the stolen personal information does not appear to have been shared with third parties.

Broader Investigation

During a search of the suspect's home in Riga, police found evidence of possible attacks against other businesses in Latvia and abroad. These incidents are currently under investigation. TSC confirmed that its IT systems operate separately from other LMT group companies, and the breach did not affect them or LMT's telecommunications network.