U.S. authorities are investigating the sale of personal data stolen from Albanian government systems after an undercover FBI agent purchased a database from suspected hackers, according to court documents.
A lawsuit filed in a federal court in Maryland on March 4, 2025 said a Telegram account named “Homeland Justice” offered data allegedly taken from the e-Albania system and national ID registries.
Hackers sold a database containing personal identification numbers, names, birth dates, addresses and other sensitive information on Albanian citizens, the documents showed.
“These data expose sensitive personal information and may be used for identity theft,” the filing said.
Albania’s National Cybersecurity Authority did not immediately respond to a request for comment.
The group “Homeland Justice” has previously been linked by U.S. authorities and technology companies to Iranian-backed actors following cyberattacks on Albania’s digital infrastructure in 2022.
Court documents said the group may be connected to other hacking entities, including “Handala Hack” and “Karma Below,” described as part of a broader network linked to Iranian security structures.
Some IT experts in Albania questioned the extent of those links, saying there is insufficient evidence of direct ties to Iran or international hacking groups.
Cybersecurity specialists warned the leak poses long-term risks, including identity theft, financial fraud and misuse of personal data.
“When data enter illegal markets, they continue to circulate and be reused,” experts said.
They urged institutions to shift from reactive to proactive measures, including continuous monitoring, stronger system protection and public awareness.
Experts said that even if some data were compromised years ago, the risks remain active and require ongoing protection efforts.