Andorra's CASS suffers personal data breach through stolen certificates
Attackers used digital certificates stolen from several filing agents to access Andorra's CASS business portal and view numerous members' personal information without authorisation. The exact number of people affected was not disclosed. The national cyber security authority is coordinating the response with CASS and relevant authorities in Andorra and abroad, and warned of potential follow-up fraud using the exposed information.
Key facts
- Affected organisation
- CASS
- Incident type
- Data breach
- Occurred / detected
- 2026-11
- Scale of damage
- Unauthorised viewing of numerous members' personal information. The exact number of people affected was not disclosed.
- Cause / method
- Not confirmed
- Location
- Andorra
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- A coordinated response was undertaken in connection with the theft of digital certificates related to CASS, and a warning was issued about potential follow-up fraud.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.