maemolol (Jun 25 2026 at 11:43): maemolol (Jun 25 2026 at 11:43):lvm's maps are currently unavailable due to a massive breach and ransomware attack in their systems
UrSuS (Jun 25 2026 at 11:44):Where can I get more info on this?
maemolol (Jun 25 2026 at 11:47):i learned about this through a reddit post, and confirmed it by just going on the lvm maps site
Notification Bot (Jun 25 2026 at 11:51):3 messages were moved here from #general > LVM ceļi by HellMap.
HellMap (Jun 25 2026 at 11:52):I was wondering why it was down for so long. I assumed it's just another of their regular "we broke something".
Colby (Jun 25 2026 at 12:00): HellMap (Jun 25 2026 at 12:03):My concern is that because this attack seems to have happened via geo server vulnerabilities, that they might end up further restricting or limiting access. Their WMS stuff is already so bad
maemolol (Jun 25 2026 at 12:06):Colby said:
20 hour old reddit post
3 hour old article
did they just realise that a breach happened???
HellMap (Jun 25 2026 at 12:06):Colby said:
"ļaunatūra". karteiz lasot IT ziņas, jāņem klāt vārdnīca, lai saprastu latviskojumus
HellMap (Jun 25 2026 at 12:08):maemolol said:
20 hour old reddit post
3 hour old articledid they just realise that a breach happened???
That article is also devoid of any real information. You could have written the same article about literally any breach. It doesn't even say they aren't paying ransom, although I think it's implied. In any case - it's all may bes and perhapses.
UrSuS (Jun 25 2026 at 12:09):maemolol said:
Colby said:
20 hour old reddit post
3 hour old articledid they just realise that a breach happened???
Probably they have just prepared some official announcement
HellMap (Jun 25 2026 at 12:13):Also that article is so intent on saying it's some random guy not politically motivated and just bragging about this and ransoming for money. Do they realize that what they are actually saying then is that if this is just some random guy so easily breaching this, then what do you imagine a hostile state-sponsored actor might be able to do?
Colby (Jun 27 2026 at 08:16):https://www.lsm.lv/raksts/zinas/latvija/26.06.2026-eksperts-kiberuzbrukuma-latvijas-valsts-meziem-izmantota-septinus-gadus-veca-ievainojamiba.a652888
https://www.lsm.lv/raksts/zinas/latvija/26.06.2026-certlv-atbildibu-par-kiberuzbrukumu-latvijas-valsts-meziem-uznemies-arvalstu-izspiedejvirusu-grupejums.a652861
maemolol (Jun 27 2026 at 09:07):bruh
maemolol (Jun 27 2026 at 09:09):not the second one, that much is already in the reddit thread i originally sent, but the first one... if you're a government company, please do at least annual comprehensive security tests
HellMap (Jun 27 2026 at 09:15):Apparently, government is 2 years late implementing new cybersecurity regulations meanwhile they still have budget of 24 million for "cybersecurity".
HellMap (Jun 27 2026 at 09:22):Also I guess someone finally read the reddit post, so they actually admit it was a dude ransomwaring :man_facepalming:
Colby (Jun 27 2026 at 09:40):would have been fun seeing the gaslighting if the hacker wasnt so open about their methods
HellMap (Jun 30 2026 at 09:10): HellMap (Jun 30 2026 at 09:14):Pēc "Panorāmas" vēstītā, hakeris ir [..] izdzēsis rezerves kopijas.
LVM aģentūrai LETA jau ziņoja, [..] ka visiem failiem [..] ir rezerves kopijas.
So which it?
UrSuS (Jun 30 2026 at 09:16):https://www.facebook.com/share/1BAiFVSwV6/
maemolol (Jun 30 2026 at 09:18):HellMap said:
Pēc "Panorāmas" vēstītā, hakeris ir [..] izdzēsis rezerves kopijas.
LVM aģentūrai LETA jau ziņoja, [..] ka visiem failiem [..] ir rezerves kopijas.
So which it?
maybe someone stored a backup on their personal machine? brave choice in terms of opsec, but, y'know, turned out to be useful one day
maemolol (Jun 30 2026 at 09:18):then again that is several dozen terabytes of data at least, so seems really unlikely
HellMap (Jun 30 2026 at 09:19):Mums ir pieejamas visu uzņēmuma datu rezerves kopijas un nekādi datu zudumi nav konstatēti
HellMap (Jun 30 2026 at 09:21):Personas dati, kas, pamatojoties uz šobrīd pieejamo informāciju, iespējams, ir skarti: [..] citi personas dati, kas atradās ietekmētajās sistēmās
Hope none of you registered for map access or something... oh wait
maemolol (Jun 30 2026 at 09:23):this is a great way to remind you all that you can set up breach alerts on have i been pwned
HellMap (Jun 30 2026 at 09:25):personas datu drošība uzņēmumam ir būtiska prioritāte
7000~ password list
I think we have a different definition of "priority" when there is an unencryped password list on their servers.
maemolol (Jun 30 2026 at 09:31):i guess i'm reacting to this with the perspective of a software developer, but erm... how does one miss password hashing on a public thing?
HellMap (Jun 30 2026 at 09:38):Here's the guy's quick video YouTube - - YouTube
Literal command injection. I just cannot believe how basic/stupid this whole is "hack" is.
He didn't link this, but this seems to be CVE-2024-36401 https://nvd.nist.gov/vuln/detail/cve-2024-36401
maemolol (Jun 30 2026 at 09:45):
HellMap (Jul 01 2026 at 09:39):Vienlaikus policija apgalvo – pret Elvi Strazdiņu nav sākts kriminālprocess. Viņam tikai piemērots statuss "persona, pret kuru sākts kriminālprocesss".
I'm not hitting you, you're just repeatedly colliding yourself with my fist!
Last updated: Jul 26 2026 at 22:51 UTC