Meta tags:

Headings (most frequently used words):

hack, 2019, bulgarian, revenue, agency, contents, background, attack, aftermath, reactions, see, also, references, arrest, of, kristiyan, boykov, commission, for, personal, data, protection, attempt, government, political, groups, industry,

Text of the page (most frequently used words):
the (75), 2019 (51), data (42), july (37), and (29), #bulgarian (28), breach (21), retrieved (20), 2018 (19), with (15), 2017 (15), government (15), edit (15), for (14), hack (13), 2014 (13), personal (13), was (12), from (12), attack (12), agency (10), revenue (9), national (9), commission (9), articles (8), operation (8), boykov (8), nra (8), that (8), wikipedia (7), october (7), hacking (7), 2016 (7), hacker (7), had (7), bulgaria (6), cyber (6), cybersecurity (6), august (6), used (6), about (5), this (5), page (5), links (5), cyberattack (5), citizens (5), protection (5), register (5), also (5), revealed (5), toggle (4), contents (4), search (4), all (4), empty (4), dead (4), 2015 (4), 2013 (4), state (4), security (4), ransomware (4), leak (4), open (4), against (4), kristiyan (4), not (4), millions (4), commercial (4), million (4), spent (4), according (4), company (4), file (4), website (4), hide (4), move (4), sidebar (4), language (3), view (3), you (3), june (3), external (3), cyberattacks (3), black (3), 2010 (3), vulnerabilities (3), major (3), army (3), kitten (3), group (3), hat (3), hackers (3), groups (3), new (3), events (3), attacks (3), leaks (3), email (3), computer (3), dir (3), software (3), attempt (3), released (3), country (3), entire (3), kapital (3), daily (3), leaked (3), bivol (3), years (3), its (3), ministry (3), billion (3), have (3), online (3), help (3), reactions (3), out (3), database (3), his (3), police (3), their (3), information (3), which (3), media (3), aftermath (3), servers (3), folders (3), some (3), more (3), than (3), names (3), numbers (3), entities (3), tools (3), main (3), table (2), code (2), contact (2), privacy (2), policy (2), terms (2), may (2), using (2), site (2), non (2), hidden (2), categories (2), sections (2), expanded (2), pages (2), short (2), description (2), wikidata (2), 2010s (2), wannacry (2), petya (2), notpetya (2), gameover (2), zeus (2), duqu (2), energy (2), red (2), 2012 (2), botnet (2), 2011 (2), silent (2), guccifer (2), pla (2), unit (2), team (2), bear (2), bangladesh (2), ukrainian (2), world (2), anonymous (2), phone (2), incident (2), russian (2), elections (2), bank (2), breaches (2), medical (2), yahoo (2), theft (2), network (2), incidents (2), timeline (2), into (2), system (2), novinite (2), arrested (2), permanent (2), link (2), what (2), when (2), adult (2), white (2), darik (2), news (2), law (2), registry (2), full (2), crash (2), business (2), deals (2), education (2), children (2), been (2), references (2), see (2), services (2), petition (2), since (2), 2002 (2), results (2), industry (2), can (2), adding (2), section (2), political (2), announced (2), carried (2), attacker (2), affected (2), databases (2), him (2), time (2), one (2), social (2), lock (2), before (2), year (2), arrest (2), following (2), total (2), outlets (2), gigabytes (2), included (2), csv (2), files (2), identification (2), payments (2), amounted (2), called (2), few (2), serious (2), two (2), related (2), report (2), nearly (2), projects (2), background (2), detailing (2), appearance (2), upload (2), changes (2), history (2), read (2), article (2), subsection (2), log (2), create (2), account (2), donate (2), menu (2), add, topic, mobile, cookie, statement, statistics, developers, conduct, legal, safety, contacts, disclaimers, text, available, under, additional, apply, agree, registered, trademark, profit, organization, wikimedia, foundation, inc, use, creative, commons, attribution, sharealike, license, rendered, parsoid, last, edited, 2026, utc, permanently, january, 2022, cs1, sources, infobox, mapframe, missing, coordinates, different, computing, https, org, index, php, title, 2019_bulgarian_revenue_agency_hack, oldid, 1360540697, titanium, tiny, banker, r2d2, vpnfilter, joanap, annabelle, xafecopy, triton, rensenware, logiclocker, kirk, brickerbot, agent, punkeypos, philadelphia, pegasus, mirai, memz, necurs, locky, keranger, jigsaw, industroyer, hitler, fastpos, project, sauron, teslacrypt, rombertik, kasidet, tear, flocker, centerpos, regin, kronos, finfisher, emotet, darkhotel, careto, carbanak, brambul, havex, darkseoul, cryptolocker, blackpos, shamoon, mahdi, grum, flame, fbi, moneypak, dridex, dexter, carna, alina, zeroaccess, stars, metulji, alureon, andromeda, citadel, stuxnet, kelihos, coreflood, blackshades, bad, rabbit, malware, kr00k, bluekeep, microarchitectural, sampling, dragonblood, foreshadow, sigspoof, tlbleed, lazy, restore, speculative, store, bypass, exactis, efail, spectre, meltdown, blueborne, roca, vulnerability, krack, bob, doublepulsar, eternalblue, broadcom, cloudbleed, dirty, cow, badlock, drown, stagefright, jasbug, winshock, ss7, row, hammer, rootpipe, poodle, shellshock, heartbleed, iseeyou, evercookie, publicly, disclosed, jester, topiary, track2, sabu, mlt, junaid, hussain, sam, hocevar, jeremy, hammond, elliott, gunton, george, hotz, kim, anh, mustafa, bassam, ryan, ackroyd, individuals, yemen, xdedic, shadow, brokers, tailored, access, operations, syrian, electronic, stealth, falcon, rocket, apollo, pranknet, platinum, 61486, 61398, numbered, panda, nso, lords, dharmaraja, andariel, bluenoroff, lazarus, islamic, division, iranian, helix, confederation, gossipgirl, fancy, equation, elfin, darkmatter, dark, basin, cozy, charming, bureau, 121, appin, alliance, ugnazi, tdo, teamp0ison, redhack, paypal, ourmine, nullcrew, lulzsec, lulzraft, lizard, squad, goatse, gnaa, cyberberkut, associated, hacktivism, jeff, bezos, whatsapp, snooping, scandal, baltimore, sri, lanka, singhealth, british, airways, atlanta, trustico, disqus, deloitte, equifax, ukraine, westminster, macron, mail, shattered, bitfinex, interference, dyn, surkov, indian, dccc, vietnam, airport, hacks, democratic, committee, hollywood, presbyterian, center, robbery, swift, banking, power, grid, vtech, talktalk, ashley, madison, hackingteam, office, personnel, management, password, sony, pictures, jpmorgan, chase, celebrity, nude, photo, tovar, anthem, singapore, cyberterrorism, snapchat, south, korea, high, roller, stratfor, linkedin, rsa, securid, compromise, playstation, outage, antisec, hbgary, federal, dnschanger, diginotar, canadian, socialist, payback, shadownet, olympic, games, australian, publication, 2009, aurora, 2020s, viruses, worms, 2000s, programmers, demand, institutions, prevented, man, who, broke, suspect, detention, mit, technology, review, happens, population, hacked, most, begs, watchdog, stop, parliament, adopts, copies, will, kept, single, storage, mediapool, trade, now, down, week, dnevnik, set, resume, work, radio, blocks, sbs, australia, collapsed, platform, safe, school, displayed, sega, tragic, despite, december, bgn, absent, reuters, systemic, steal, bulgarians, financial, list, professionals, launched, demanding, infrastructure, demanded, clarity, billions, without, noticeable, source, unsuccessful, remains, unknown, targeted, but, local, apparently, vicinity, headquarters, grounds, critical, denied, carrying, stating, asked, uncomfortable, questions, slight, intimidation, attempted, extract, lawyer, evidence, existent, accusation, neither, points, specific, period, even, perpetrator, employers, market, competitor, occasion, frame, cause, damage, forced, confession, contained, username, matched, however, dated, supposed, old, employee, charged, sofia, deployed, randomly, collected, sql, injection, day, confirmed, authenticity, were, accessed, through, rarely, refund, service, abroad, vat, emailed, details, finance, taken, lines, containing, figures, debt, health, pension, users, claimed, volume, 110, message, retarded, parodic, freed, julian, assange, gambling, days, reported, begged, fix, issues, three, did, take, any, action, protect, emails, 000, doubts, over, capacity, handle, continued, contains, economy, crashed, caused, sloppy, maintenance, left, inaccessible, weeks, essentially, halting, transactions, began, audit, hardware, later, came, effect, establishing, along, several, positions, cybercrime, accident, prevention, terabytes, hard, disk, drive, failure, including, addresses, openly, accessible, addressed, until, investigative, journalism, successive, governments, producing, only, five, provide, indicated, very, low, level, citing, lack, qualified, employees, public, agencies, noncompetitive, salaries, compared, private, sector, leva, well, records, revenues, tax, debts, betting, activities, dating, back, early, 2007, recently, researchers, every, compromised, massive, responsible, sent, scope, location, date, free, encyclopedia, item, other, printable, version, download, pdf, print, export, switch, legacy, parser, get, shortened, url, cite, here, general, actions, english, talk, čeština, top, special, recent, community, portal, learn, contribute, random, current, navigation, jump, content,

Text of the page (random words):
2019 bulgarian revenue agency hack wikipedia jump to content main menu main menu move to sidebar hide navigation main page contents current events random article about wikipedia contact us contribute help learn to edit community portal recent changes upload file special pages search search appearance donate create account log in personal tools donate create account log in contents move to sidebar hide top 1 background 2 attack 3 aftermath toggle aftermath subsection 3 1 arrest of kristiyan boykov 3 2 commission for personal data protection hack attempt 4 reactions toggle reactions subsection 4 1 government 4 2 political groups 4 3 industry 5 see also 6 references toggle the table of contents 2019 bulgarian revenue agency hack 1 language čeština edit links article talk english read edit view history tools tools move to sidebar hide actions read edit view history general what links here related changes upload file permanent link page information cite this page get shortened url switch to legacy parser print export download as pdf printable version in other projects wikidata item appearance move to sidebar hide from wikipedia the free encyclopedia 2019 data breach 2019 bulgarian national revenue agency hack date 15 july 2019 revealed location bulgaria on 15 july 2019 a massive data breach of the national revenue agency nra of bulgaria was revealed the hacker responsible for the breach sent an email to major bulgarian media outlets detailing the scope of the attack the leaked data amounted to 57 folders with csv files detailing the names and national identification numbers of some 5 million bulgarian citizens as well as records on revenues tax and social security payments debts online betting data and company activities dating back as early as 2007 and as recently as june 2019 1 according to some researchers nearly every adult in the country had their personal data compromised 2 background edit successive bulgarian governments have spent nearly two billion leva 1 15 billion on e government projects since 2002 producing few results the national revenue agency is one of only five entities that provide e government services to citizens 3 a 2018 government report indicated a very low level of cybersecurity at government entities citing a lack of qualified it employees in public agencies and noncompetitive salaries compared to the private sector 4 in 2017 personal data including addresses and names of 1 2 million bulgarian children was openly accessible on a ministry of education website and the leak was not addressed until it was revealed by a report on investigative journalism website bivol bg 5 serious doubts over government capacity to handle data continued in august 2018 when the bulgarian commercial register which contains the entire database of the bulgarian economy crashed 6 a total hard disk drive failure caused by sloppy maintenance left 25 terabytes of company data inaccessible for more than two weeks essentially halting business transactions 7 8 9 following the crash the e government state agency began an audit of software and hardware used by all government entities 10 later that year a cybersecurity law came into effect establishing a national cybersecurity system along with several government positions related to cybercrime and accident prevention 11 a few days before the nra hack was revealed a white hat hacker reported serious vulnerabilities in the bulgarian commission for personal data protection website the hacker had begged the commission to fix the issues for three years the commission did not take any action to protect the data which included emails and phone numbers of more than 14 000 citizens 12 attack edit on 15 july an anonymous hacker emailed bulgarian media outlets with details of an attack carried out against servers of the ministry of finance 1 the leak revealed 11 gigabytes of data taken from national revenue agency databases the 57 folders included csv files some with more than 1 million lines containing full names national identification numbers revenue figures personal debt information health and pension payments and a register of online gambling website users the email also claimed that the entire volume of data amounted to 110 folders and 21 gigabytes the message called the bulgarian government retarded its computer security parodic and called for julian assange to be freed 1 on the following day the nra confirmed the authenticity of the data according to the agency its servers were accessed through a rarely used vat refund service for deals abroad and the breach had affected about 3 of their total database 13 the hacker deployed a sql injection and randomly collected data from the servers 14 aftermath edit arrest of kristiyan boykov edit kristiyan boykov a 20 year old employee of a cybersecurity company was arrested on 16 july by police in sofia and charged with breach and theft of personal data 15 according to police the released data also contained a lock file with information about the attacker s computer and username which matched the one boykov used in social media the lock file however was dated before the supposed time of the attack 14 boykov was released on 18 july on the grounds that his attack had not affected critical nra databases 16 he denied carrying out the attack stating that police had asked him uncomfortable questions used slight intimidation and attempted to extract a forced confession 17 his lawyer announced that the evidence against boykov is non existent and that the accusation neither points to a specific time period or even a perpetrator according to boykov and his employers a market competitor may have used the occasion to frame him and cause damage to their company 14 17 commission for personal data protection hack attempt edit on july 22 the commission for personal data protection announced that an unsuccessful cyber attack had been carried out against it it remains unknown if the database was targeted but the attacker had used the local wi fi network and was apparently in the vicinity of the commission s headquarters 18 reactions edit government edit this section is empty you can help by adding to it october 2019 political groups edit this section is empty you can help by adding to it october 2019 industry edit bulgarian it professionals launched an online petition demanding open source software infrastructure for government services the petition also demanded clarity on the billions spent on e government since 2002 without noticeable results 19 see also edit list of data breaches references edit 1 2 3 personal data of millions of bulgarian citizens leaked from nra in bulgarian kapital daily 15 july 2019 retrieved 21 july 2019 in systemic breach hackers steal millions of bulgarians financial data reuters 16 july 2019 retrieved 22 july 2019 about bgn 2 billion have been spent on the absent bulgarian e government for 15 years novinite 5 december 2017 retrieved 22 july 2019 cybersecurity is tragic despite millions spent sega 19 july 2019 retrieved 22 july 2019 education ministry s new platform open and safe school displayed personal data of 1 2 million bulgarian children bivol bg 10 october 2017 retrieved 22 july 2019 the commercial register in bulgaria collapsed sbs australia 24 august 2018 retrieved 22 july 2019 crash of commercial register of bulgaria blocks business deals bulgarian national radio 15 august 2018 retrieved 22 july 2019 commercial register set to resume work in 16 00 in bulgarian dnevnik 27 august 2018 retrieved 22 july 2019 the trade registry now down a full week mediapool 18 august 2018 retrieved 22 july 2019 state registry copies will be kept in a single storage darik news 15 august 2018 retrieved 22 july 2019 parliament adopts new cybersecurity law darik news 31 october 2018 retrieved 22 july 2019 for 3 years white hat begs data protection watchdog to stop leaks from its site bivol bg 12 july 2019 retrieved 22 july 2019 personal data of millions of bulgarian citizens leaked from nra in bulgarian kapital daily 15 july 2019 retrieved 21 july 2019 1 2 3 the country with the most open data in the world in bulgarian kapital daily 19 july 2019 retrieved 21 july 2019 what happens when a country s entire adult population is hacked mit technology review 17 july 2019 retrieved 21 july 2019 permanent dead link suspect arrested for nra hacker attack released from detention novinite 18 july 2019 retrieved 21 july 2019 1 2 kristiyan boykov i m not the man who broke into nra s system in bulgarian dir bg 22 july 2019 retrieved 22 july 2019 hacking attempt against the personal data commission prevented in bulgarian dir bg 22 july 2019 retrieved 22 july 2019 programmers demand open code for software at bulgarian institutions dir bg 27 july 2019 retrieved 28 july 2019 v t e hacking in the 2010s 2000s timeline of security hacking incidents timeline of computer viruses and worms 2020s major incidents 2010 operation aurora publication of 2009 events australian cyberattacks operation olympic games operation shadownet operation payback operation socialist 2011 canadian government diginotar dnschanger hbgary federal operation antisec playstation network outage rsa securid compromise 2012 linkedin hack stratfor email leak operation high roller 2013 south korea cyberattack snapchat hack cyberterrorism attack of june 25 2013 yahoo data breach singapore cyberattacks 2014 anthem medical data breach operation tovar 2014 celebrity nude photo leak 2014 jpmorgan chase data breach 2014 sony pictures hack russian hacker password theft 2014 yahoo data breach 2015 office of personnel management data breach hackingteam ashley madison data breach talktalk data breach vtech data breach ukrainian power grid cyberattack swift banking hack 2016 bangladesh bank robbery hollywood presbyterian medical center ransomware incident commission on elections data breach democratic national committee cyber attacks vietnam airport hacks dccc cyber attacks indian bank data breaches surkov leaks dyn cyberattack russian interference in the 2016 u s elections 2016 bitfinex hack 2017 shattered 2017 macron e mail leaks wannacry ransomware attack westminster data breach petya and notpetya 2017 ukraine ransomware attacks equifax data breach deloitte breach disqus breach 2018 trustico atlanta cyberattack british airways data breach singhealth data breach 2019 sri lanka cyberattack baltimore ransomware attack bulgarian revenue agency hack whatsapp snooping scandal jeff bezos phone hacking incident hacktivism anonymous associated events cyberberkut gnaa goatse security lizard squad lulzraft lulzsec new world hackers nullcrew ourmine paypal 14 redhack teamp0ison tdo ugnazi ukrainian cyber alliance groups appin bangladesh black hat hackers bureau 121 charming kitten cozy bear dark basin darkmatter elfin team equation group fancy bear gossipgirl confederation guccifer 2 0 hacking team helix kitten iranian cyber army islamic state hacking division lazarus group bluenoroff andariel lords of dharmaraja nso group numbered panda pla unit 61398 pla unit 61486 platinum pranknet red apollo rocket kitten stealth falcon syrian electronic army tailored access operations the shadow brokers xdedic yemen cyber army individuals ryan ackroyd mustafa al bassam kim anh vo george hotz guccifer elliott gunton jeremy hammond sam hocevar junaid hussain mlt sabu track2 topiary the jester major vulnerabilities publicly disclosed evercookie 2010 iseeyou 2013 heartbleed 2014 shellshock 2014 poodle 2014 rootpipe 2014 row hammer 2014 ss7 vulnerabilities 2014 winshock 2014 jasbug 2015 stagefright 2015 drown 2016 badlock 2016 dirty cow 2016 cloudbleed 2017 broadcom wi fi 2017 eternalblue 2017 doublepulsar 2017 silent bob is silent 2017 krack 2017 roca vulnerability 2017 blueborne 2017 meltdown 2018 spectre 2018 efail 2018 exactis 2018 speculative store bypass 2018 lazy fp state restore 2018 tlbleed 2018 sigspoof 2018 foreshadow 2018 dragonblood 2019 microarchitectural data sampling 2019 bluekeep 2019 kr00k 2019 malware 2010 bad rabbit black energy 2 blackshades coreflood kelihos stuxnet 2011 citadel andromeda alureon duqu gameover zeus metulji botnet stars zeroaccess botnet 2012 alina carna dexter dridex fbi moneypak flame grum mahdi red october shamoon 2013 blackpos cryptolocker darkseoul havex 2014 brambul black energy 3 carbanak careto darkhotel duqu 2 0 emotet finfisher gameover zeus kronos regin 2015 centerpos flocker hidden tear kasidet rombertik teslacrypt project sauron 2016 fastpos hitler industroyer jigsaw keranger locky necurs memz mirai pegasus petya and notpetya philadelphia punkeypos x agent 2017 brickerbot kirk logiclocker rensenware triton wannacry xafecopy 2018 annabelle joanap vpnfilter 2019 r2d2 tiny banker titanium retrieved from https en wikipedia org w index php title 2019_bulgarian_revenue_agency_hack oldid 1360540697 categories 2019 in computing 2019 in bulgaria cyberattacks 2010s in hacking july 2019 in bulgaria hidden categories articles with short description short description is different from wikidata pages using infobox mapframe with missing coordinates cs1 bulgarian language sources bg all articles with dead external links articles with dead external links from january 2022 articles with permanently dead external links articles to be expanded from october 2019 all articles to be expanded articles with empty sections from october 2019 all articles with empty sections this page was last edited on 22 june 2026 at 03 35 utc page was rendered with parsoid text is available under the creative commons attribution sharealike 4 0 license additional terms may apply by using this site you agree to the terms of use and privacy policy wikipedia is a registered trademark of the wikimedia foundation inc a non profit organization privacy policy about wikipedia disclaimers contact wikipedia legal safety contacts code of conduct developers statistics cookie statement mobile view search search toggle the table of contents 2019 bulgarian revenue agency hack 1 language add topic