Cybersecurity and website security

In the first quarter of 2026, CERT.LV manually handled 846 cyber incidents, the second highest quarterly figure on record. On 22 June a ransomware attack was detected at AS «Latvijas valsts meži» and, according to CERT.LV, about 44 GB of data leaked.

From 8 to 10 August, CSDD data leaked through a vulnerability in the web application med.csdd.lv, affecting payment receipt data of about 1.2 million people. The review commission found that two-factor authentication was not used, monitoring was insufficient, and there was no control of request volumes or anomaly detection. In early September the website of TSC, an LMT group smart-device repair company, was hacked and attackers obtained about 7% of customer data. The State Police urged all companies to check their websites.

The conclusion is simple: the same basics, namely 2FA, monitoring, request limiting and updates, matter for a small business too. Attacks are often automated and do not choose victims by size. A bot simply looks for an old plugin or an open login page.

A security audit is a check of your website and the systems connected to it. You receive a written list of findings by priority and a fix plan that either we or your own developer can carry out.

Most problems come from small things that are not done regularly. That is why security is a set of habits, not a one-off task.

We make backups on the 3-2-1 principle: three copies, in two different locations or on different media, one of them off-site. Backups are kept on a separate server, not on the one where the website runs. We also test restoring regularly, because a backup that has never been restored is only a hope.

Monitoring lets you learn about a problem before your customers do. We watch site availability, unexpected file changes, SSL expiry and unusual traffic or login attempts, and send alerts. Sites of KVANTS hosting clients are also monitored through status.kvants.lv.

If your website has been hacked, the key is to act calmly and in order. Hacked website recovery usually goes like this:

You can report an incident to CERT.LV. If personal data has leaked, the company as data controller must notify the Data State Inspectorate (DVI) within 72 hours of learning about the breach, under Article 33 of the GDPR, if the breach poses a risk to people.

We help gather the facts and prepare the technical part. The legal decisions are yours, including whether and how to report.

The National Cybersecurity Law has been in force since 1 September 2024 and transposes the requirements of the EU NIS2 directive. It mainly applies to medium and large companies in regulated sectors.

However, their suppliers increasingly receive security requirements in contracts: 2FA, backups, incident reporting, updates. We help small suppliers meet such technical requirements. We do not offer compliance certification.