Romanian Central Depository hit by cyberattack affecting investor portal

A cyberattack struck the Central Depository, the backbone of Bucharest Stock Exchange transaction processing, on October 16, affecting its Online Services for Investors application that registers individual Romanian investors. The incident was identified promptly, leading to swift investigative and remedial actions, and system monitoring has been heightened. Critical settlement and registry operations remained fully functional, with no alteration to holdings or settled transaction records.

Although user registration data—including names, addresses, personal identification numbers, ID details, email, phone and IBAN—were accessed, they were not modified, and backups prevented any data loss. The Central Depository has hired a specialist team, notified the National Directorate for Cyber Security, and advised users to change passwords and enable two-factor authentication where possible.