# Albania Data Breach History
## Context for Diella AI Research

---

## Summary

Albania has suffered **multiple massive data breaches** affecting millions of citizens. This context is critical when evaluating the security of Diella and e-Albania systems.

---

## Major Incidents

### 1. April 2021 - Voter Database Leak (910,000 records)

**Scale:** 910,000 Albanians (~1/3 of population, ~50% of voters)

**Data Exposed:**
- Full names and ID numbers
- Phone numbers
- Voting centers and birthplace
- Residence codes
- Employment information and employer names
- Tax data
- Emigration status and destination countries
- Political affiliation predictions
- "Patronage" assignments (party officials monitoring citizens)

**Format:** Microsoft Access database

**Source:** Allegedly from Civil Registry, provided to Socialist Party for electoral campaigns

**Government Response:** National Agency for Information Society (ANA) denied involvement, claimed e-Albania "at no time stores, administers or processes citizens' data"

**Source:** [Exit.al](https://exit.al/en/exit-explains-the-leak-of-over-910000-albanians-personal-data-to-politicians/)

---

### 2. December 2021 - Salary Data Leak (637,138 records)

**Scale:** 637,138 citizens (22% of entire population)

**Data Exposed:**
- Names
- ID card numbers
- Salaries
- Job positions
- Employer names

**Distribution:** Shared on WhatsApp as Excel file

**Government Response:** PM Rama apologized, stated "it looks more like an internal infiltration rather than an outside cyber-attack"

**Source:** [The Record](https://therecord.media/personal-and-salary-data-for-637138-albanian-citizens-leaks-online)

---

### 3. 2022 - Iranian Hacker Attacks

**Actor:** Iranian-backed hacker group (HomeLand Justice)

**Context:** Retaliation for Albania hosting Iranian opposition group (MEK)

**Impact:**
- Albania cut diplomatic ties with Iran
- NATO condemned the attacks
- Private data of thousands published online
- Government systems disrupted

**Source:** [Balkan Insight](https://balkaninsight.com/2023/01/25/albanians-mull-options-as-data-security-takes-new-hit/)

---

### 4. December 2023 - Assembly & Telecom Attacks

**Targets:**
- Assembly of the Republic of Albania
- One Albania (telecom company)

**Disclosed by:** AKCESK (National Authority for Electronic Certification and Cyber Security)

**Source:** [Security Affairs](https://securityaffairs.com/156644/security/cyber-attacks-hit-albania.html)

---

## Implications for Diella

1. **Trust Issues:** Citizens' data has been repeatedly exposed, raising questions about AI system security
2. **Same Agency:** AKSHI (which built Diella) has been implicated in or connected to previous breaches
3. **ID Number Problem:** Experts recommended changing all citizen ID numbers - unclear if implemented
4. **Political Misuse:** Data was allegedly used for political targeting, raising concerns about AI monitoring

---

## Expert Recommendations (from breaches)

> "Only one recommendation solves this issue, which is to renew the citizen's ID so that the IDs would be different."

---

## Sources

- [Infosecurity Magazine - PM Apology](https://www.infosecurity-magazine.com/news/albanias-prime-minister-issues/)
- [Transparency International - Data Breach Alarm](https://www.transparency.org/en/press/albania-alarm-over-indications-of-personal-data-breach-election-campaign-violations)
- [Balkan Insight - Massive Data Leaks](https://balkaninsight.com/2021/12/23/massive-data-leaks-in-albania-pose-public-security-question/)
- [Exit.al - 910k Leak Explained](https://exit.al/en/exit-explains-the-leak-of-over-910000-albanians-personal-data-to-politicians/)
- [The Record - 637k Salary Leak](https://therecord.media/personal-and-salary-data-for-637138-albanian-citizens-leaks-online)
- [ICIJ Offshore Leaks - Albania](https://offshoreleaks.icij.org/search?c=ALB)

---

*Documented: January 2026*