The Paper Deed That Saved Romania's Property Rights
Romania’s entire digital land registry — the national cadastre recording who owns every parcel, building, and mortgage in the country — was wiped clean this month after a hacker breached the National Agency for Cadastre and Real Estate Advertising (ANCPI) using valid credentials, mapped the internal network, and destroyed both production systems and online backups when the agency refused to pay. The threat actor, operating under the handle ByteToBreach, had already posted stolen employee credentials and internal documents for sale on a hacking forum when the deletion began on July 14. A week later, the real-estate market remains paralysed: notaries cannot record transactions, citizens cannot obtain ownership proofs, and ANCPI is rebuilding its entire network from scratch. Security firm KELA has since doxxed the operator as Zakaria Mahdjoub of Oran, Algeria — the same actor who breached Sweden’s e-government portal earlier this year.
What makes this a near-miss rather than a catastrophe is a detail buried in the coverage: ANCPI appears to have retained an offline copy of the wiped data. Without it, as Risky Business noted, “things would have gotten really messy over the coming months.” The deeper irony is that Romania’s cadastre was paper-based until only a few years ago. As one HN commenter observed: “The majority of people have paper documents from the land registry. Digitalization of the land registry is a fairly recent development in Romania so people almost always request papers when they register their land.” The analog layer — physical deed books, stamped extracts, notarial archives — is the disaster-recovery system that the digital infrastructure failed to be. Another commenter noted the narrower risk: without a functioning registry, a seller could conceivably offload the same parcel twice, since nothing would flag the prior transaction. Paper deeds don’t prevent that either, but they slow it down.
Romania is not an isolated case. It is the seventh country in three years to suffer a serious attack on its property registry, joining Poland, Slovakia, Greece, Morocco, Russia, and Ukraine. Greece’s Hellenic Cadastre reported over 400 separate cyberattack attempts — and while hackers breached one backup, they failed to reach the main database. The contrast is instructive: Greece kept its primary system separated enough from its compromised perimeter that 400 attempts yielded 1.2 gigabytes of exfiltrated employee files and nothing from the 200-terabyte property registry. Romania’s architecture apparently allowed a single set of valid credentials to reach production and backups together, which is the failure mode that turns a breach into an extinction event.
The recovery plan tells its own story. ANCPI is now migrating applications to Romania’s Government Cloud, coordinated by the Special Telecommunications Service, with a target completion of July 22. That is a reasonable incident-response move — but it reframes the problem as an infrastructure-location issue rather than an architecture issue. Moving the same credential-accessible, backup-coupled system to a government cloud does not inherently solve the failure that occurred. What solves it is separation: air-gapped or immutable backups that a domain-compromising attacker cannot reach, and credential tiering that prevents a single compromised account from touching both production and recovery. Greece’s survival was a function of separation, not of being on a cloud.
The lesson here is unglamorous and old. The 3-2-1 backup rule — three copies, two media, one offline — exists precisely for this scenario, and it works when the “one offline” piece is genuinely offline. Romania’s paper records were, in effect, an accidental fourth copy that no ransomware could touch. The countries now digitising their cadastres at speed should take note: the paper you’re replacing may be the only reason a future breach stays recoverable. Replace it with a digital system whose backups live on the same credentials plane, and you’ve built a single point of failure for an entire nation’s property rights. Romania got lucky. The next cadastre to be wiped might not have a filing cabinet to fall back on.
Sources
- Risky Bulletin: Hacker wipes Romania’s entire land registry database
- Cybernews: Hacker wipes European country’s entire land registry database
- HN discussion: Hacker wipes Romania’s land registry database
- ekathimerini: Land registry hit ‘over 400 times’ by hackers (Greece)
- Offseq Threat Radar: Romanian Government Cadastre (ANCPI) cyber attack
- Slashdot: Hacker Wipes Romania’s Entire Land Registry Database
- Rescana: Romania ANCPI Land Registry Wiped in Credential-Based Cyberattack