Breaches and incidents
RER Sud, RER Vest and RETIM Ecologic Service (Romania): unauthorized access to “Contul meu” customer portal databases at three RER Group waste firms
RER Sud (Buzau) and RETIM (Timisoara) notices say that on 7 Oct 2026 unauthorized access was found to the “Contul-meu” customer account database, which...
- Disclosed
- Verification
- Checked against a primary source
What happened
- RER Sud (Buzau) and RETIM (Timisoara) notices say that on 7 Oct 2026 unauthorized access was found to the “Contul-meu” customer account database, which holds customers’ personal data including login credentials but not ID card copies or card details; Oradea Online (11 Oct) reports RER Vest emailed customers that an unidentified person accessed its “Contul-meu” database, including addresses, invoices and authentication data.
- Root cause: not disclosed (RER Sud says technical details “cannot be made public”); the notices do not say whether the three companies share one platform, though all are RER Group Romania firms using the same portal name.
- No attacker named; RER Vest said it could not determine whether data was copied but the attacker claims to hold it.
- Portals were suspended and passwords and sessions invalidated; ANSPDCP and DNSC were notified and criminal complaints filed; customers were warned about fraud and payment-redirect messages. The notices are undated, so the title uses the earliest dated report.