Latvian Police Arrest 23-Year-Old in Cyber Extortion Scheme Targeting Businesses Latvian authorities have arrested a 23-year-old man suspected of hacking at least two companies, stealing sensitive customer data, and attempting to extort payments in exchange for silence. The first attack was detected in February, with a second breach uncovered in early September at TSC, an electronics repair firm under the LMT telecommunications group. The suspect allegedly exploited vulnerabilities in company websites to access databases, extracting personal information including names, contact details, device passcodes, bank account numbers, and even building access codes. Using anonymous email accounts, he then demanded ransom payments to prevent the data’s public release. Investigators believe he employed automated tools to scan for security weaknesses rather than targeting specific victims, while also masking his location with digital obfuscation techniques. A search of the suspect’s Riga home revealed evidence of potential attacks on additional businesses in Latvia and abroad, though those cases remain under investigation. Arrested on September 15, the unnamed individual now faces charges that could result in up to five years in prison. Authorities confirmed the stolen data does not appear to have been shared with third parties. TSC, which operates in Latvia, Lithuania, and Estonia, disclosed the breach earlier this month, attributing it to an unpatched vulnerability in its website that exposed a database of customer repair requests. The company clarified that its systems are separate from LMT’s broader infrastructure, and there is no indication the telecom network was compromised. The number of affected customers and the specific vulnerability exploited have not been disclosed.