The Ministry of Mobility and Public Works reported on Friday that a cyberattack has occurred on the website mconcept.lu. The incident was discovered on 3 August and was quickly brought under control.
According to analysis, an external party had managed to create a false administrator account. The security hole was found and closed immediately. No further unauthorised access to the system was detected.
Data from around 40 people or companies is likely to have been affected. This only concerns professional contact data that was stored via the site's contact form.
So far, there is no indication that this data has been stolen, viewed or misused. However, as a precaution, the Ministry is treating the case as a possible data breach, thus complying with the rules of data protection (GDPR).
The fake accounts and harmful elements have now been removed, the website has been cleaned up and is functioning normally again. The incident had no impact on services for citizens.
The Ministry said the people who could be affected had been informed, and the incident had been reported to the CNPD.
It is likely that the risk for those affected is low, as only a limited amount of data was affected and to date no abuse has been detected.
The Ministry emphasised it would continue to prioritise security for its computer systems and data protection.
