Image: Marc Acronym / shutterstock.com

Imagine you want to buy a house, sell your apartment, or simply request a land registry extract—and suddenly, nothing works anymore. This is exactly the scenario Romania has been experiencing in recent days. A massive cyberattack has taken the IT systems of the Romanian National Agency for Cadastre and Land Registry (ANCPI) offline, effectively bringing large parts of the real estate market to a standstill.

This incident clearly demonstrates just how dependent modern states have become on functioning computer systems. When digital systems fail, it no longer affects only government agencies—but millions of citizens and businesses as well.

A digital attack with real-world consequences

According to Romanian authorities, the systems of the National Cadastre and Land Registry Administration were the target of a serious cyberattack. Among other systems, the attack affected the central system used to manage property data and process real estate transactions.

The immediate consequences were enormous. Numerous digital services were no longer available. Email systems went down, applications could not be processed, and many real estate transactions had to be postponed. Anyone looking to buy, sell, or finance a property during those days had to be patient.

What was particularly alarming was that the alleged attackers claimed to have deleted data and even backup copies. This claim attracted significant international attention. However, Romanian authorities later refuted this claim, stating that, based on the investigations conducted so far, the actual data had not been destroyed. Instead, they said, intensive efforts were underway to safely restore all systems to operation.

It is precisely this contradiction that illustrates how difficult it often is to assess the situation after a cyberattack. Hackers often publish their own claims, while authorities can initially only communicate confirmed findings.

Why the Land Registry Is So Important for a Country

When people think of the land registry, many think of dry bureaucracy. In fact, however, it is one of the most important registries in a country.

This is where ownership of land and buildings is recorded. Banks verify this information before granting financing. Buyers rely on it. Notaries, government agencies, and courts work with this information on a daily basis.

If such a registry fails, it does not lead to legal anarchy. No one automatically loses their property. Nevertheless, many everyday processes come to a standstill. Sales contracts cannot be concluded, financing is delayed, and proof of ownership often cannot be provided on short notice.

The incident in Romania makes it clear that digital infrastructure is just as critical today as roads, power grids, or water supplies.

Cybercriminals are increasingly targeting government agencies

Attacks on government agencies are no longer the exception. Cybercriminals have realized that public institutions are particularly attractive targets. These institutions hold vast amounts of data, and at the same time, many government agencies operate complex IT systems that have, in some cases, evolved over many years.

Often, the attackers' initial goal is extortion. Data is encrypted or systems are blocked. The attackers then demand money in exchange for releasing the information. If the ransom is not paid, they threaten to publish or delete the data.

Whether the perpetrators’ claims in the Romanian case are entirely accurate is currently the subject of ongoing investigations. The relevant authorities emphasize that, as of now, the technical and legal databases have not been compromised and that several backup copies are available. Nevertheless, the days-long outage alone demonstrates how significant the economic damage can be, even if the data can ultimately be restored.

The most important lesson: Digitalization requires security

This incident is not an argument against digitization. On the contrary.

Digital records make everyday life much easier. Documents can be processed more quickly, information is available in one central location, and many trips to government offices are no longer necessary.

However, every digital system requires a security strategy that is just as modern. This includes regular security updates, independent audits, well-protected backups, contingency plans, and trained staff. It is equally important that critical systems be restored to full operational capacity as quickly as possible following an attack.

After all, the real damage often isn't caused by lost data, but by the disruption of entire administrative processes.

When technology becomes a bottleneck, nobody can move fast anymore

The attack on Romania’s land registry is far more than just a sensational hacking story. It shows just how closely our daily lives are now intertwined with functioning IT systems. Property doesn’t simply disappear as a result of a cyberattack. But when digital tools fail, an entire sector of the economy suddenly comes to a standstill.

Anyone who calls for digitalization must also be willing to invest in its security. All too often, modern software is purchased while corners are cut when it comes to protecting the systems. This works until the first serious attack occurs. Then what was thought to be an IT problem suddenly becomes a problem for homebuyers, banks, businesses, and the entire government. Cybersecurity is neither a luxury nor a cost factor—it is the insurance that ensures a country will still be functioning tomorrow.

Subscribe to the newsletter

and always up to date on data protection.