Chamber of Deputies of Romania (Camera Deputaților din România) Listed by knight Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target government institutions as part of a broader pattern of double-extortion attacks, in which data is stolen and then used as leverage. In late January 2024, the Chamber of Deputies of Romania (Camera Deputaților din România) appeared on a listing associated with the knight ransomware group, placing a core legislative body in the public view of such claims.

Public detail remains limited to the group's own statements and the fact of the listing itself. The number of people affected is unknown, and independent confirmation of the full scope has not been provided in available records. The incident matters because the organisation holds sensitive internal and personal information tied to elected officials, staff and parliamentary operations.

Inside the incident

On 29 January 2024 the Chamber of Deputies of Romania was listed by the knight ransomware group. According to the group's own claim, internal files were exfiltrated in a ransomware attack. The group stated that it had obtained more than 250,000 MB of documents and contracts and other information, and indicated it would publish a small part of the data first. Sample material referenced in the claim included documents described as relating to deputies, covering national ID details, salaries, spending, advertising contracts, employees' offices and related records.

No further technical details about the intrusion method, exact timing of the compromise, or independent verification of the volume or contents have been disclosed in the available facts. The listing itself constitutes the primary public record of the incident.

The group behind it: knight

Knight is a ransomware operation known for double-extortion tactics: encrypting systems while also stealing data and threatening to publish it on dedicated leak sites if demands are not met. Like other groups in this category, it typically posts victim names, sample files and claims about data volume to increase pressure. Public reporting on knight has documented similar listings of organisations across sectors, with the group often releasing partial samples before any larger dump.

In this case the group claims to have taken more than 250,000 MB of material from the Chamber of Deputies of Romania and has pointed to sample files. Those statements remain unverified claims made by the actors themselves; no independent confirmation of the full dataset or of any ransom negotiation appears in the available record.

Who is Chamber of Deputies of Romania (Camera Deputaților din România)?

The Chamber of Deputies is the lower house of Romania's bicameral parliament. It is responsible for legislation, oversight of government and representation of citizens. As a national legislative body it routinely handles internal administrative records, personnel files, financial and contractual documents, correspondence and information linked to elected deputies and parliamentary staff.

A breach claim against such an institution is consequential because the data it holds can include personal identifiers, salary and expense information, contracts and operational details. Exposure of that material can affect both the individuals named in the records and public confidence in the security of parliamentary systems.

What was likely exposed

The available facts state that internal files were exfiltrated. The knight group's claim specifically refers to documents and contracts and asserts that material concerning deputies includes national ID information, salaries, spending records, advertising contracts, employees' offices and additional related data. Sample files were referenced in the listing.

Exact contents and the full volume remain unconfirmed beyond the group's statements. Organisations of this type typically hold personnel records, financial and contractual documents, internal correspondence and identity-related data for elected members and staff. Whether those categories were present in the claimed 250,000 MB set, and in what completeness, has not been independently established.

The real-world impact

If the claimed material is authentic, individuals whose national ID numbers, salary details or other personal records appear could face elevated risks of identity misuse, targeted phishing or financial fraud. Deputies and staff may also encounter reputational or privacy harms from the public release of spending or contractual information.

For the Chamber of Deputies itself, the incident creates operational and trust challenges: the need to assess what was taken, notify affected parties where required, and review security controls. Because the number of people affected is unknown and the precise dataset unconfirmed, the full scale of individual and institutional impact cannot yet be measured from public information alone.

Were you affected?

If you are a current or former deputy, parliamentary employee or contractor who has shared personal or financial information with the Chamber of Deputies, treat the claim as a prompt to monitor accounts and documents carefully. Watch for unexpected communications that reference parliamentary matters, and consider placing fraud alerts with relevant credit or identity services where available. Change passwords on any accounts that may have reused credentials linked to work email or systems.

Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets. This provides one practical way to assess personal exposure while official details remain limited.

AICompiled with AI assistance from public sources and published under our editorial standards.