Police investigate cyber attack on state forest systems and uncover unauthorised intermediary
The State Police are continuing to investigate a cyber attack on AS "Latvijas valsts meži" that occurred at the end of June. During the investigation, it has emerged that a third party contacted the attackers without the company's authorisation, offering to pay a ransom.
Police investigate cyber attack on state forest systems and uncover unauthorised intermediary
The State Police conducted new investigative measures yesterday in a case opened on 26 June 2026 following a cyber attack against the information systems of the state forestry company. These measures uncovered additional circumstances that were previously unknown.
Law enforcement officials have established that a certain citizen, who had no connection whatsoever to the hackers' attack itself, independently assumed the role of representing AS "Latvijas valsts meži". Without requesting or obtaining any authorisation from the company's management, this individual established contact with the criminals behind the attack. He discussed with them the possibility of paying money to regain access to the encrypted data.
Investigators decided not to open a separate case against this person. Instead, he has been included in the existing criminal proceedings with the status of "person against whom criminal proceedings have been initiated". The suspect has not been placed in police custody — he came to the precinct of his own accord following a police summons to provide an explanation, and is currently cooperating with the investigation team. A search of his residence and property was also carried out, during which one electronic device was confiscated.
The agency emphasises that its attention is focused not on what this person may have previously said publicly about the hacker incident, but on his unlawful conduct — representing a state company without its knowledge or consent.
The offence has been classified in accordance with provisions of the Criminal Law that prohibit intentionally disrupting the operation of an automated data processing system where it contains information concerning state security — whether political, military, economic or social. A second charge has subsequently been added concerning arbitrary conduct: the performance of actions not in accordance with procedures established by law, where a state institution disputes such conduct and where it has caused considerable damage.
Source: LVportals.lv
Source: Google News LV — Crime (lv)