BulgarianNationalRevenueAgency
nap.bg
About This Breach
The Bulgarian National Revenue Agency (NRA) suffered a significant data breach in 2019, resulting in the exposure of personal and financial data of nearly 5 million Bulgarian citizens. The breach, which was the largest in Bulgaria's history, involved the theft of 21 terabytes of data. The compromised data included individuals' full names, personal identification numbers (PINs), addresses, income data, and information related to health insurance and the country's commercial register. The breach was acknowledged by the NRA in July 2019, a month after it occurred.
Data Exposed
Breach Details
| Breach Type | Data Breach |
| Searchable | Yes |
| Verified | Yes |
| Sensitive Data | No |
| Reference | https://en.wikipedia.org/wiki/2019_Bulgarian_revenue_agency_hack (opens in new tab) |
Frequently Asked Questions
When did the BulgarianNationalRevenueAgency data breach happen?
BulgarianNationalRevenueAgency was breached in Jul 2019. The breach was added to the XposedOrNot index on November 8, 2023.
How many records were exposed in the BulgarianNationalRevenueAgency breach?
470,899 records were exposed, making it the #511 largest of the 763 breaches in our index.
What data was exposed in the BulgarianNationalRevenueAgency breach?
The exposed data includes: Email addresses, Physical addresses, Government IDs, Names.
What should I do if I was affected by the BulgarianNationalRevenueAgency breach?
Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.
More Miscellaneous Breaches
What Should You Do?
Enable Two-Factor Authentication
Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.
Place a Fraud Alert
Contact credit bureaus to place a fraud alert or credit freeze to prevent identity theft.
Beware of Scam Mail
Be skeptical of unexpected correspondence requesting personal details.
Monitor Your Accounts
Set up login alerts and review account activity regularly for suspicious access.