Chamber of Deputies of Romania (Camera Deputaților din România) Listed by knight Ransomware Group

On January 29, 2024, the Chamber of Deputies of Romania appeared on the leak site of the knight Ransomware Group. The listing claims the attackers exfiltrated more than 250,000 MB of internal documents and contracts from the Romanian parliamentary body and began publishing selected samples, including files described as containing national IDs, salaries, spending records, advertising contracts, and employee office details for deputies.

Details in the Leak Listing

The knight Ransomware Group’s onion site states that it obtained the data during a ransomware attack and has chosen to release a portion immediately while threatening further publication. The primary disclosure does not specify the exact number of individuals affected, nor does it list every data type stolen. It does state that the material includes sensitive parliamentary records and personal information linked to elected officials and staff. The group provided download links to sample archives and preview images showing what appear to be official documents. No ransom demand figure is published on the listing itself.

Internal files and contracts form the core of the claimed exfiltration. The disclosure indicates the data was taken from systems belonging to Romania’s lower house of parliament, although the precise breach vector and timeline remain undisclosed by the victim at the time of the listing.

Why This Matters for You and Your Family

When a national legislative body loses control of documents containing national identification numbers, salary details, and financial spending records, the ripple effects reach far beyond government offices. Ordinary citizens whose information appears in contracts, vendor files, or employee records tied to the Chamber can face sudden exposure. If your name, address, or government identifier is among the stolen material, it can be combined with other publicly available data to build a complete profile that criminals use for fraud, targeted phishing, or identity theft.

Even if you have no direct connection to Romanian politics, credential leaks and document leaks of this nature frequently cascade into the private sector. Passwords or email addresses reused from related services can be tested across banking, healthcare, and social media accounts that belong to you or your family members.

Doxxing and Identity-Chain Risks

The leaked documents are said to link personal identifiers with financial and employment details. Once such information is public, attackers can map one data point to another, creating long identity chains that connect official records to social-media handles, gaming usernames, and family addresses. A single national ID number published alongside a salary record can quickly lead to doxxing campaigns or spear-phishing attacks aimed at relatives.

Children’s gaming accounts are especially vulnerable in these chains. Gamers often reuse email addresses or passwords that appear in government-adjacent leaks, allowing attackers to seize accounts, demand ransoms from parents, or use the compromised profiles to spread malware. The knight listing illustrates how parliamentary data breaches can accelerate broader doxxing campaigns that do not stop at the original victim.

Knight Ransomware Group’s Track Record

Public reporting attributes knight Ransomware Group’s emergence to late 2023. The group has targeted organizations across Europe and North America, typically gaining initial access through phishing or exploited remote desktop services before exfiltrating large document repositories. Their standard playbook involves encrypting systems, then pressuring victims by releasing sample files on their leak site while maintaining a countdown for full publication. Notable prior victims include mid-sized government contractors and healthcare providers, though exact details vary across reports. The group’s extortion style relies on selective early leaks designed to embarrass the victim and encourage payment.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, government identifiers, and online handles so you can see exactly what chains back to this incident.
• Rotate any password used on Romanian government-related services or any account that shares those credentials, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught and acted upon within hours.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts which often chain to the same addresses and identifiers.
• Let remediation specialists handle data-broker takedown requests and coordinate removal efforts on your behalf while you focus on securing day-to-day accounts.

The knight Ransomware Group’s listing of the Chamber of Deputies of Romania shows how quickly parliamentary records can become public ammunition. Acting promptly on credential hygiene and identity mapping limits the damage before criminals stitch your data into larger attack campaigns. Start your DoxxScan trial today and combine continuous monitoring, identity-chain mapping, and hands-on specialist remediation to protect yourself and your family from both this claimed breach and the ones that will inevitably follow.