Investigation into Cyber Incident at Lithuanian Customs Identifies Potential Personal Data Breach; BAP Unavailable
Continuing its investigation into the cyber incident detected on 10 November, Lithuanian Customs has determined that the personal data of users who logged in to the Common User Management Portal (BAP) on 9–10 November may have been affected by the incident. Lithuanian Customs is contacting these individuals directly to provide information about the potential breach and recommendations on how to mitigate possible risks.
For security reasons, access to the Common User Management Portal (BAP) remains suspended, and some services are restricted. Access to European Commission systems, including POUS, ICS2 and others, is also temporarily unavailable. This primarily affects individuals and small businesses that use BAP for authentication in other systems. Other systems and services, including those used by customs representatives (intermediaries), are operating as normal.
Lithuanian Customs advises individuals whose data may have been affected to exercise particular caution when receiving emails, SMS messages or phone calls requesting personal or financial information. Users are advised not to click on suspicious links and to carefully verify website addresses. The official Lithuanian Customs websites are muitine.lrv.lt and mano.muitine.lt.
Lithuanian Customs continues to implement measures to contain the incident and ensure security. Connections to the affected infrastructure are being restricted and isolated, data required for the investigation are being preserved, and preparations are underway for the secure restoration of systems. External infrastructure and cybersecurity specialists have also been engaged to assist in managing the incident.
For questions regarding the potential personal data breach, please contact [email protected] or call +370 5 236 2302. For questions regarding system availability, please call 0 5 266 5000 or email [email protected].
Lithuanian Customs continues to manage the cyber incident, investigate its scope and potential impact, and restore system functionality. As soon as new, verified information becomes available regarding the incident’s impact on data or customs services, Lithuanian Customs will promptly inform the public and businesses.
The State Data Protection Inspectorate and the relevant European Union institutions are being notified of the potential personal data breach. The National Cyber Security Centre and the State Digital Solutions Agency were previously informed of the incident. An investigation into the potential personal data breach has been launched.
Last updated: 13-11-2026
Related news:
To the attention of Customs Clients: Information Systems will be temporarily unavailable
Regarding the Export of Vehicles to Belarus
Lithuanian Customs Warns of Fraudulent Websites Impersonating the Customs Authority
To the attention of Customs Clients: Information Systems will be temporarily unavailable