Russian hackers attacked the National Information Systems of Ukraine (NAIS) and the Ministry of Justice of Ukraine. According to preliminary data, dozens of registers were hacked.
Russian hackers attacked the National Information Systems of Ukraine (NAIS) and the Ministry of Justice of Ukraine. According to preliminary data, dozens of registers were hacked.
“Today, a certain number of Ukrainian registries ‘disappeared’. Oops, ‘Disappeared’? Well, to put it simply — congratulations, you were hacked,” Andriy Perevezii, an independent cybersecurity specialist and founder of the information security auditing company Disl.Tech, wrote on Facebook, commenting on the hack of the National Information System of Ukraine (NAIS) and the Ministry of Justice of Ukraine.
"If we believe the hackers (by the way, at the moment I have no reason not to believe them), all the registries indicated in the image were downloaded and then accordingly destroyed," the cyber expert continues, adding the corresponding screenshot.
The specialist adds that "the real picture has begun to be "spun" by specialists and people related to cybersecurity, there is no official information about the hack, the scale of the hack."
"The official position of the Ministry of Justice is a technical failure (at 4:00 p.m.). The Katsaps posted their post a little later, at 7:53 p.m. Oops, but the notary database has not been working since 12:00 (this is what I know for sure). And now at 11:30 p.m. we finally see a post from an official, Olga Stefanishyna (Minister of Justice — ed.), that it was indeed hacked. That is, for more than 12 hours, no one in general did anything that they did not recognize, or even considered it necessary to inform the population," Perevezii writes.
The cyber expert also spoke about the consequences of the hack.
"From the point of view of cybersecurity and IT departments, those companies that work in the direction with the aforementioned registries will have to rebuild their architecture a little, live without registries (not fatally)," the specialist explained.
As for ordinary users, even more of our data has ended up in chat rooms, and accordingly, over time, in public access (most likely), adds the cyber expert.
"Legal consequences — for example, the inability to identify and validate a power of attorney. This is up to lawyers, given that among the registers is the "Register of Prohibitions on the Alienation of Real Estate Objects," writes Perevezii.
"The key thing in this whole situation is the complete unwillingness to acknowledge hacker attacks and engage in tales of technical failures. The National Intelligence Service has repeatedly warned about the vulnerabilities of their systems, but I will say in the words of one of our ministers - "The role of cybersecurity is somewhat exaggerated," the specialist concluded.
At the time of writing, the NAIS website looked like this:
Recall that earlier the Ministry of Justice reported a large-scale failure at the level of the network infrastructure serving the registers. The Ministry of Justice noted that work is ongoing to eliminate the problems. At the same time, the Unified and State Registers, the agency's websites, the State Enterprise "NAIS" and the call center will be unavailable until the end of the day (December 19).
Subsequently, Minister of Justice Olga Stefanishyna wrote that, according to a preliminary assessment, there are no threats to the functioning of other resources.
"First of all, the State Register of Civil Status Acts of Citizens, the Unified State Register of Legal Entities and Individual Entrepreneurs, and the State Register of Real Estate Rights and Encumbrances will be restored."
The time for primary restoration will be approximately 2 weeks. The specifics of the provision of services to citizens will be provided tomorrow (December 20) during the day.
"After full restoration, a thorough analysis of the attack will be conducted together with relevant authorities to strengthen protection against similar interventions in the future. We are keeping the situation under control and doing everything necessary to restore all services as soon as possible," the Minister of Justice noted.
Due to technical work by the state enterprise "National Information Systems", more than 20 services are temporarily unavailable in the "Diya" application. Among them:
— Registration, amendments, closure of individual entrepreneurs;
— Extract from the Unified State Register;
— Registration of LLC;
— Transition of LLC to model charter;
— Construction services;
— Employee booking;
— Car re-registration;
— Online marriage;
— Act records;
— Construction services;
— Registration of property ownership;
— Informational note on the DRRP;
— IDP loans;
— Assistance to a person with a disability since childhood and children with disabilities;
— Help for a person caring for a sick child;
— Assistance with the adoption of a child;
— Child support for a single mother or father;
— Construction services;
— isOselya;
— Notification of damaged/destroyed property;
— isRecovery;
— isRecovery for business;
— Notification of repair work;
— Reservation by certificate;
— International Register of Losses;
— Marriage application;
— Extracts and reissuance of certificates from the DRACS.
