DisclosureLens
GLOBALUnknownLow

DEPOZITARUL CENTRAL SA

bd_a727f3a86e157432 · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Oct 16, 2026

To disclose

—

Affected

Not disclosed

Confidence

60%
Full breach record for DEPOZITARUL CENTRAL SA →

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

Atac cibernetic la Depozitarul Central. CNP-uri și coduri IBAN, printre datele personale accesate. Depozitarul Central: Le Depozitarul Central, une entité du groupe de la Bourse de Valeurs de Bucarest, a été victime d'une cyberattaque. Cette intrusion a permis l'accès aux données personnelles des utilisateurs, incluant les noms, adresses, numéros de CNP (Cod Numeric Personal), numéros de carte d'identité, adresses e-mail, numéros de téléphone et codes IBAN. L'application d'inscription des investisseurs est temporairement indisponible. L'institution a notifié le DNSC et a émis des recommandations de sécurité aux utilisateurs pour prévenir les tentatives de fraude et d'ingénierie sociale.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Oct 16, 2026

Press report

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

—

Compliance clock

Not assessable

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

If an SEC 8-K, state-AG notice or victim statement lands, DisclosureLens merges it into an incident and links it here.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.