Andorra's CASS hit by personal data breach using stolen certificates
Attackers used digital certificates stolen from several filing agents to access Andorra's CASS business portal and view numerous members' personal information without authorization. The exact number of people affected was not disclosed. The national cybersecurity authority is coordinating the response with CASS and relevant authorities in Andorra and abroad, and warned of potential follow-up fraud using the exposed information.
Key facts
- Affected organization
- CASS
- Incident type
- Data breach
- Occurred / detected
- 2026-11
- Scale of damage
- Unauthorized viewing of numerous members' personal information. The exact number of people affected was not disclosed.
- Cause / method
- Not confirmed
- Location
- Andorra
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- A coordinated response was undertaken in connection with the theft of digital certificates related to CASS, and a warning was issued about potential follow-up fraud.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.