Stream: general

Topic: LVM Jun 2026 outage

maemolol (Jun 25 2026 at 11:43):

lvm's maps are currently unavailable due to a massive breach and ransomware attack in their systems

UrSuS (Jun 25 2026 at 11:44):

Where can I get more info on this?

maemolol (Jun 25 2026 at 11:47):

i learned about this through a reddit post, and confirmed it by just going on the lvm maps site

Notification Bot (Jun 25 2026 at 11:51):

3 messages were moved here from #general > LVM ceļi by HellMap.

HellMap (Jun 25 2026 at 11:52):

I was wondering why it was down for so long. I assumed it's just another of their regular "we broke something".

Colby (Jun 25 2026 at 12:00):

https://www.lsm.lv/raksts/zinas/latvija/25.06.2026-latvijas-valsts-mezi-piedzivojusi-kiberuzbrukumu-velesanu-sistema-nav-cietusi.a652634/

HellMap (Jun 25 2026 at 12:03):

My concern is that because this attack seems to have happened via geo server vulnerabilities, that they might end up further restricting or limiting access. Their WMS stuff is already so bad

maemolol (Jun 25 2026 at 12:06):

Colby said:

https://www.lsm.lv/raksts/zinas/latvija/25.06.2026-latvijas-valsts-mezi-piedzivojusi-kiberuzbrukumu-velesanu-sistema-nav-cietusi.a652634/

20 hour old reddit post
3 hour old article

did they just realise that a breach happened???

HellMap (Jun 25 2026 at 12:06):

Colby said:

https://www.lsm.lv/raksts/zinas/latvija/25.06.2026-latvijas-valsts-mezi-piedzivojusi-kiberuzbrukumu-velesanu-sistema-nav-cietusi.a652634/

"ļaunatūra". karteiz lasot IT ziņas, jāņem klāt vārdnīca, lai saprastu latviskojumus

HellMap (Jun 25 2026 at 12:08):

maemolol said:

20 hour old reddit post
3 hour old article

did they just realise that a breach happened???

That article is also devoid of any real information. You could have written the same article about literally any breach. It doesn't even say they aren't paying ransom, although I think it's implied. In any case - it's all may bes and perhapses.

UrSuS (Jun 25 2026 at 12:09):

maemolol said:

Colby said:

https://www.lsm.lv/raksts/zinas/latvija/25.06.2026-latvijas-valsts-mezi-piedzivojusi-kiberuzbrukumu-velesanu-sistema-nav-cietusi.a652634/

20 hour old reddit post
3 hour old article

did they just realise that a breach happened???

Probably they have just prepared some official announcement

HellMap (Jun 25 2026 at 12:13):

Also that article is so intent on saying it's some random guy not politically motivated and just bragging about this and ransoming for money. Do they realize that what they are actually saying then is that if this is just some random guy so easily breaching this, then what do you imagine a hostile state-sponsored actor might be able to do?

Colby (Jun 27 2026 at 08:16):

https://www.lsm.lv/raksts/zinas/latvija/26.06.2026-eksperts-kiberuzbrukuma-latvijas-valsts-meziem-izmantota-septinus-gadus-veca-ievainojamiba.a652888
https://www.lsm.lv/raksts/zinas/latvija/26.06.2026-certlv-atbildibu-par-kiberuzbrukumu-latvijas-valsts-meziem-uznemies-arvalstu-izspiedejvirusu-grupejums.a652861

maemolol (Jun 27 2026 at 09:07):

bruh

maemolol (Jun 27 2026 at 09:09):

not the second one, that much is already in the reddit thread i originally sent, but the first one... if you're a government company, please do at least annual comprehensive security tests

HellMap (Jun 27 2026 at 09:15):

Apparently, government is 2 years late implementing new cybersecurity regulations meanwhile they still have budget of 24 million for "cybersecurity".

HellMap (Jun 27 2026 at 09:22):

Also I guess someone finally read the reddit post, so they actually admit it was a dude ransomwaring :man_facepalming:

Colby (Jun 27 2026 at 09:40):

would have been fun seeing the gaslighting if the hacker wasnt so open about their methods

HellMap (Jun 30 2026 at 09:10):

https://www.lsm.lv/raksts/zinas/latvija/28.06.2026-eksperts-hakeris-par-latvijas-valsts-mezu-datu-atsifresanu-sagaida-vairak-neka-600-000-eiro.a652989/

https://www.lsm.lv/raksts/zinas/latvija/29.06.2026-sak-kriminalprocesu-pret-kiberdrosibas-ekspertu-strazdinu-pec-atklasmem-par-kiberuzbrukumu-latvijas-valsts-meziem.a653185/

HellMap (Jun 30 2026 at 09:14):

Pēc "Panorāmas" vēstītā, hakeris ir [..] izdzēsis rezerves kopijas.

LVM aģentūrai LETA jau ziņoja, [..] ka visiem failiem [..] ir rezerves kopijas.

So which it?

UrSuS (Jun 30 2026 at 09:16):

https://www.facebook.com/share/1BAiFVSwV6/

maemolol (Jun 30 2026 at 09:18):

HellMap said:

Pēc "Panorāmas" vēstītā, hakeris ir [..] izdzēsis rezerves kopijas.

LVM aģentūrai LETA jau ziņoja, [..] ka visiem failiem [..] ir rezerves kopijas.

So which it?

maybe someone stored a backup on their personal machine? brave choice in terms of opsec, but, y'know, turned out to be useful one day

maemolol (Jun 30 2026 at 09:18):

then again that is several dozen terabytes of data at least, so seems really unlikely

HellMap (Jun 30 2026 at 09:19):

https://www.lvm.lv/jaunumi/8020-latvijas-valsts-meziem-izpirkuma-maksa-par-datu-atsifresanu-nav-pieprasita

Mums ir pieejamas visu uzņēmuma datu rezerves kopijas un nekādi datu zudumi nav konstatēti

HellMap (Jun 30 2026 at 09:21):

https://www.lvm.lv/jaunumi/8019-lvm-pazinojums-klientiem-un-sadarbibas-partneriem-par-kiberdrosibas-incidentu-un-konstateto-personas-datu-aizsardzibas-parkapumu

Personas dati, kas, pamatojoties uz šobrīd pieejamo informāciju, iespējams, ir skarti: [..] citi personas dati, kas atradās ietekmētajās sistēmās

Hope none of you registered for map access or something... oh wait

maemolol (Jun 30 2026 at 09:23):

this is a great way to remind you all that you can set up breach alerts on have i been pwned

HellMap (Jun 30 2026 at 09:25):

personas datu drošība uzņēmumam ir būtiska prioritāte

7000~ password list

I think we have a different definition of "priority" when there is an unencryped password list on their servers.

maemolol (Jun 30 2026 at 09:31):

i guess i'm reacting to this with the perspective of a software developer, but erm... how does one miss password hashing on a public thing?

HellMap (Jun 30 2026 at 09:38):

Here's the guy's quick video YouTube - - YouTube

Literal command injection. I just cannot believe how basic/stupid this whole is "hack" is.

He didn't link this, but this seems to be CVE-2024-36401 https://nvd.nist.gov/vuln/detail/cve-2024-36401

maemolol (Jun 30 2026 at 09:45):

HellMap (Jul 01 2026 at 09:39):

https://www.lsm.lv/raksts/zinas/latvija/30.06.2026-blogeris-strazdins-gatavs-tiesaties-saistiba-ar-policijas-parmetumiem.a653360/

Vienlaikus policija apgalvo – pret Elvi Strazdiņu nav sākts kriminālprocess. Viņam tikai piemērots statuss "persona, pret kuru sākts kriminālprocesss".

I'm not hitting you, you're just repeatedly colliding yourself with my fist!

maemolol (Jul 30 2026 at 20:01):

this feels like this might still be related to this, but could someone please check the orthophoto imagery? i can't get it to load in either id or josm, and i feel like it might be because lvm still hasn't republished it

HellMap (Jul 30 2026 at 20:09):

It's past the point of concerning and is now full on hilarious how incompetent all of this is. It's been over a month and they can't get their stuff restored.

HellMap (Jul 30 2026 at 20:09):

Oh, it's still down. I mean, it was even down on their own website. Their https://www.lvmgeo.lv/kartes is now literally 404

maemolol (Jul 30 2026 at 20:18):

HellMap said:

It's past the point of concerning and is now full on hilarious how incompetent all of this is. It's been over a month and they can't get their stuff restored.

i hope their election things got jacked then, specifically to add the cherry onto this tragicomedic cake

Colby (Jul 31 2026 at 06:55):

Weirdly https://lvmgeo.lvm.lv/ works fine

HellMap (Jul 31 2026 at 08:48):

Oh yeah, it does, I swear it didn't very recently.

Dāvis Kļaviņš (Jul 31 2026 at 09:30):

https://www.lvm.lv/jaunumi/8050-atjaunota-lvm-geo-lietotnes-darbiba
Relates to app, but likely web browser version was also restored around the same time. Unfortunately, not WMS services.

Maris (Jul 31 2026 at 18:30):

Hi,
This is Maris Kuzmins from LVM. I can inform you that all LVM GEO systems and services are available for our customers for a while now. Lvmgeo.lvm.lv and LVM GEO Mobile are back as well. We have not been working on restoring publicly available Geoserver services so far. We do not know if those services will be available ever again. That was our voluntary work, with no fee for our geospatial community. I believe those times are over or at least services won't be fully public, we need some time to think about the approch. Any suggestions? And thanks to OSM community, we appreciate your maps and input a lot!

maemolol (Jul 31 2026 at 19:08):

aw, that's a shame, they were quite useful for editing osm here, especially in more rural areas

Dāvis Kļaviņš (Aug 01 2026 at 05:34):

Without freely available orthophoto basemap, data quality will start to deterioriate because satellite imagery is offset but it will become now the new default as there are no alternative orthophoto sources (licence matters). Only a few users use LGIA orthophoto WMTS for which one needs to apply and have a contract signed. That's not an option for the default basemap in editors which is used by majority and every newcomer. Although outdated due to changes in LGIA policy, LVM GEO WMS orthophoto was still a proper solution for the default basemap in editors.

Colby (Aug 01 2026 at 05:54):

i can mostly cope with esri and bing imagery but the lack of lidar is terrible, also some of the more niche layers like lidar intensity and slope were useful sometimes

Dāvis Kļaviņš (Aug 01 2026 at 05:59):

https://e-pieteikumi.lgia.gov.lv/WmsServices/CreateIndividual
is an option for DTM access:
"No aerolāzerskenēšanas datiem sagatavotā digitālās virsmas modeļa vizualizēti attēli ar izšķirtspēju 25cm"

Colby (Aug 01 2026 at 06:02):

guess im doing that then..

Colby (Aug 12 2026 at 14:02):

markalex (Aug 12 2026 at 14:23):

Those are paid options, right?

Dāvis Kļaviņš (Aug 12 2026 at 14:24):

No, free.

markalex (Aug 12 2026 at 14:34):

I'm really confused, please correct me.
I thought that link you mentioned above is about this: https://www.lgia.gov.lv/lv/electronic-application-system
and it has cenrādi at https://likumi.lv/ta/id/319632-latvijas-geotelpiskas-informacijas-agenturas-maksas-pakalpojumu-cenradis-un-ta-piemerosanas-kartiba

Do personal users have an exemption from that pay, or something?
Also, is it free only for "No aerolāzerskenēšanas datiem sagatavotā digitālās virsmas modeļa vizualizēti attēli ar izšķirtspēju 25cm", or for orthophotos also?

HellMap (Aug 12 2026 at 14:41):

That law is about paid services. As in - if the service is paid, then this law describes how the cost is applied. It's basically to standardize the prices.

markalex (Aug 12 2026 at 14:48):

I'm worried, because request form asks for my bank details, and nowhere I could see (or at least understand) does it say about exceptions for the pay.

Dāvis Kļaviņš (Aug 12 2026 at 14:50):

Orthophoto services also are free, see https://www.lgia.gov.lv/lv/wms-servisi

HellMap (Aug 12 2026 at 14:53):

I think you don't need to fill in bank details in the form, although I have no idea. I still don't know if they still require a static IP.

markalex (Aug 12 2026 at 14:59):

Dāvis Kļaviņš said:

Orthophoto services also are free, see https://www.lgia.gov.lv/lv/wms-servisi

Thank you, it helped a lot!

HellMap (Aug 12 2026 at 15:00):

They also have a PDF with a full list on that application landing page

HellMap (Aug 12 2026 at 15:01):

Like they list every item (I think these match the items you check in the application)

markalex (Aug 12 2026 at 15:02):

Form has bank details marked as required, and IP too.
I couldn't proceed, because my personal number is not good enough: second part must have first digit as ether 0,1 or 2, for some reason. I guess this is implied as a hidden citizenship test.

Dāvis Kļaviņš (Aug 12 2026 at 15:05):

Bank details can be filled with dummy values as they are not relevant for free services.

Dāvis Kļaviņš (Aug 12 2026 at 15:07):

A while ago, 0.0.0.0/0 worked well for IP. If not, they will inform you afterwards.

HellMap (Aug 12 2026 at 15:11):

markalex said:

I guess this is implied as a hidden citizenship test.

It's open data, but not too open, you know :upside_down:

kaposts (Aug 12 2026 at 19:02):

For the elevation map I just recently tried using the data from here https://www.lgia.gov.lv/lv/Digit%C4%81lais%20virsmas%20modelis

The process isn't as convenient as getting WMS tiles in JOSM/id and it's not a replacement but it also has some advantages and allows things you couldn't do with fixed prerendered tiles:

• you get actual point cloud with categorized points and elevation values
• can toggle presence of high/medium vegetation to better see what's under the trees (classification isn't perfect but it's better than nothing)
• choose how exactly the data is rendered based on classification, hillshade, height based color gradient or something else

The workflow is more or less like this:

• Enable topographic map background so that you can more easily find the region you need
• download the .las file
• open the .las file in QGIS
• set a suitable CRS, EPSG:10306 and EPSG:3059 seemed to work
• customize display options or open the 3d view

Colby (Aug 13 2026 at 05:14):

CloudCompare is also an option for viewing them

maemolol (Aug 15 2026 at 12:22):

markalex said:

I guess this is implied as a hidden citizenship test.

more of a residency test, in my opinion, since i'm not a citizen, but still have an id number

maemolol (Aug 15 2026 at 12:23):

i think you have to have one to be able to live in latvia

markalex (Aug 15 2026 at 12:32):

I am a resident, and I have an ID number.
But mine dosen't match regex at the page ^(\d{6})-[012]\d{4}$

To be clear, part about [012] as first digit in second part of personal number being a citizenship check - complete speculation on my part.

maemolol (Aug 15 2026 at 12:33):

ah, hmm, that is actually quite weird

markalex (Aug 15 2026 at 12:46):

Hmm, after some cursory search, it seems like I was completely wrong.
There is no tinfoil conspiracy here, just unwarranted assumptions.

Before 2017 personal numbers were issued with format DDMMYY-CXXXX where C encoded century of birth. Source: https://lookuptax.com/docs/tax-identification-number/latvia-tax-id-guide

And somebody probably assumed, that nobody born after 2017 will be asking for WMS access anytime soon, completely forgetting, that migration happens.
At least, that's my assumption =)

markalex (Aug 15 2026 at 12:48):

I guess no I need to go and compose some nicely worded email to LGIA, asking to fix their stuff.
Unless @Maris wants to help me out on this :innocent:

Rihards Olups (Aug 16 2026 at 19:20):

LĢIA stuff likely won't be under LVM - maybe even worth splitting LĢIA access discussion in a separate topic?

Rinalds L. (Aug 19 2026 at 10:00):

Cik ilgi jāgaida, lai vispār saņemtu pat e-pastu?

Dāvis Kļaviņš (Aug 19 2026 at 10:02):

Ilgi, chill. Tagad arīdzan vasara vēl ar atvaļinājumiem.

HellMap (Aug 19 2026 at 10:04):

No otras puses tam procesam 5 minūtes būtu jāaizņem nevis kaut kāda manuāla anketu aizpildīšana un nedēļām ilga "pārbaude" vai ko viņu tur dara.

Dāvis Kļaviņš (Aug 19 2026 at 10:07):

Jā, mani arī pārsteidz cik ilgu laiku tas aizņem, ņemot vērā praktiski izdarāmo. Kopā gan būs vairāk par 5 min līguma dēļ.

evdence (Aug 28 2026 at 03:43):

Rinalds L. said:

Cik ilgi jāgaida, lai vispār saņemtu pat e-pastu?

Vairākas nedēļas var likties gaidīt

Colby (Sep 07 2026 at 09:31):

??? its back ???
https://www.lvmgeo.lv/dati

Rinalds L. (Sep 07 2026 at 09:45):

lieliskas ziņas

Colby (Sep 07 2026 at 09:47):

:thinking:

Rinalds L. (Sep 07 2026 at 09:47):

strādā?

Colby (Sep 07 2026 at 09:48):

jā

HellMap (Sep 07 2026 at 09:48):

Man JOSM saka "nē". Tu WMS/WMTS ieliki un ar kādu URL?

Colby (Sep 07 2026 at 09:50):

WMS ar šo https://geoserver.lvmgeo.lv/wms62531a9bfcfa4015856924e94076a178?
un JOSM uzliku "store WMS endpoint only, select layers at usage"

Colby (Sep 07 2026 at 09:50):

jocīgi ka vairs nav VZD kadastra slāņi

HellMap (Sep 07 2026 at 09:51):

Bet man viņš iziet caur visiem URL variantiem un beigās

HellMap (Sep 07 2026 at 09:51):

Tu vari atsūtīt gatavu gala WMS url ar xyz 8 ciklam via kaut kam?

Colby (Sep 07 2026 at 09:53):

https://geoserver.lvmgeo.lv/wms62531a9bfcfa4015856924e94076a178?FORMAT=image/png&TRANSPARENT=TRUE&VERSION=1.3.0&SERVICE=WMS&REQUEST=GetMap&LAYERS=Orto_8cikls&STYLES=&CRS={proj}&WIDTH={width}&HEIGHT={height}&BBOX={bbox}

HellMap (Sep 07 2026 at 09:54):

Dīvaini, browserī strādā. JOSM neko negrib.

HellMap (Sep 07 2026 at 09:58):

RIP windows 10

HellMap (Sep 07 2026 at 10:01):

:smiling_face_with_tear: Cik žēl, ka es JOSM faktiski nelietoju ar ortofoto.

HellMap (Sep 07 2026 at 10:03):

Tas URL ir ar kaut kādu auto-ģenerētu "kodu". Jautājums, vai tas ir stabils. Pirms prasīt default imagery repo, lai salabo/nomaina uz jauno.

HellMap (Sep 07 2026 at 10:08):

Un tad sanāk kadastra slānis (ja) nav un arī no repo būs jāņem ārā.

Maris (Sep 07 2026 at 10:19):

Sveicināti! Jā, izlēmām servisus atgriezt publiski, bet bez jebkādām garantijām uz SLA. Šis jaunais risinājums ir principā "izlikts uz ielas" un nodalīts no pārējās infrastruktūras, ar domu, ka tas noteikti tiks salauzts un kad tas notiks, katru reizi operatīvi celsim serveri atpakaļ. Saites nemainīsies, paliks šādas un būs stabilas.

Maris (Sep 07 2026 at 10:20):

Kadastrs ir, vektordatu servisā: https://geoserver.lvmgeo.lv/wmsvector62531a9bfcfa4015856924e94076a179?

Rinalds L. (Sep 07 2026 at 12:07):

Pēc 1. oktobra pārslēgsies uz LKS-2020?

Dāvis Kļaviņš (Sep 07 2026 at 15:57):

HellMap said:

RIP windows 10

Man Windows 10 JOSM no jaunajām adresēm ielādē. Atjaunoju arī saites https://josm.openstreetmap.de/wiki/Maps/Latvia (JOSM nepieciešams Update default entries iekš Preferences > Imagery). Varbūt atkarīgs no izmantotās Java versijas, kas manā gadījumā ir Temurin JRE 25.

Last updated: Sep 10 2026 at 11:46 UTC