Lithuanian prosecutors are investigating a major data breach affecting the country’s state registry systems that potentially exposed sensitive personal and property records.

The Lithuanian Prosecutor General’s Office said Friday that attackers gained unauthorized access to more than 600,000 records managed by the Centre of Registers, the state agency responsible for handling property and legal entity records.

Prosecutors said the breach involved the misuse of login credentials assigned to institutions authorized to access the databases, and likely originated from an unnamed foreign country.According to the authorities, the stolen information primarily came from Lithuania’s Real Estate and Legal Entities Registers, databases that provide paid access to official property and corporate records. Initial estimates put the financial damage at more than €111,000 ($129,000).

The Centre of Registers said in a statement Tuesday that the compromised data included personal information such as names, dates of birth and national identification numbers, along with property-related data including addresses, cadastral information and registry numbers. No contact details, bank account information, payment data or official documents such as court rulings or cadastral measurement files were exposed, according to the agency.

Lithuanian authorities said they introduced additional cybersecurity measures after detecting the breach, including blocking accounts suspected of being misused and requiring users to update access credentials.

The breach was first detected in early April, according to Centre of Registers chief Adrijus Jusas, though authorities delayed public disclosure because of the ongoing criminal investigation.

Jusas resigned Monday following scrutiny over the incident. “Given the sensitivity of the situation, I have decided to step down and hand over responsibility to other professionals,” he said in comments cited by Lithuanian media.

In a separate interview with local outlets, Jusas blamed years of underinvestment in state IT infrastructure, saying the systems required up to €60 million ($69.8 million) in upgrades to meet modern cybersecurity standards.

In a statement on Facebook, Laurynas Kasciunas, leader of Lithuania’s conservative opposition party and a former defense minister, alleged that the breach showed “the hallmarks of a Russian intelligence operation,” though he did not provide evidence for the claim. He also suggested that compromised accounts linked to Lithuania’s Migration Department may have been used in the attack.

He warned that residential address data tied to sensitive government personnel could be exploited for surveillance, phishing campaigns, coercion or sabotage planning during a crisis.

Lithuanian prosecutors have neither confirmed nor denied possible Russian involvement, and no hacking group has publicly claimed responsibility.

Lithuania, a NATO and European Union member bordering the Russian exclave of Kaliningrad as well as Russia’s ally Belarus, has repeatedly accused Moscow of conducting hybrid operations against the country, including cyberattacks, disinformation campaigns and acts of sabotage.

The incident follows similar attacks on government registries elsewhere in Eastern Europe. Last year, Slovakia’s land registry system suffered a major cyberattack that disrupted property and construction services nationwide. Around the same time, suspected Russian hackers breached Ukraine’s state registries, temporarily disrupting access to essential government services tied to digital records.