Serbian hackers claim to have stolen data of 105,000 citizens
Interior Ministry and Pension Insurance Institute say they have no information about the breach, while data protection agency does not answer calls.
Interior Ministry and Pension Insurance Institute say they have no information about the breach, while data protection agency does not answer calls.
A hacker group calling itself INF Group, suspected to operate from Serbia, has claimed it breached the databases of the Croatian Pension Insurance Institute (HZMO). During the attack, they say they obtained and publicly released personal data of as many as 105,000 Croatian citizens. The stolen information reportedly includes full names, phone numbers, personal identification numbers (OIB), and email addresses. Although the group's claims have not been officially confirmed, Dnevnik.hr reports that the hackers stated they did not sell the data but made it freely available as a matter of principle, and that they are not demanding a ransom in money or cryptocurrency.
This is not the first time INF Group has claimed responsibility for attacks on Croatian institutions. About ten days ago, the group said it had extracted and published data of approximately 86,000 citizens from Croatia's judicial system, allegedly including names, OIBs, dates of birth, and national ID numbers (JMBG). In their latest post, the hackers emphasize that they have established themselves as a serious national-level threat, not just a passing nuisance.
In their message, as reported by Dnevnik.hr, INF Group stated that the attacks are not random but carry a clear message. "And for those wondering why the pace has changed and why we are hitting harder now, let's just say that recent events in Croatia reminded us that silence is not a strategy and that every action triggers a reaction. These leaks are not a coincidence but a message - f*** your Ustasha mothers," the hackers wrote.
Journalists attempted to verify the claims with HZMO and the Ministry of the Interior (MUP). Both institutions responded that at that moment they had no information about a security incident but announced they would investigate and provide a subsequent statement. According to Dnevnik.hr, the MUP said they could not answer the query due to the confidentiality of the investigation. The Personal Data Protection Agency (AZOP) did not respond to journalists' calls before the publication of this article.
Meanwhile, over the past two days, the MUP has issued a series of warnings to citizens about scams. On Tuesday, August 18, 2026, they warned that scams most often target elderly citizens, with fraudsters exploiting their age, independent living, and lack of awareness to access their savings. The same day, they also reported the case of a female citizen who lost more than 100,000 euros due to false promises of quick profits.
On Wednesday, August 19, 2026, the MUP reported on a citizen who lost over 7,000 euros due to false promises of quick profits. Fraudsters pose as licensed agents and brokers and use fake online platforms to gain victims' trust. Citizens are advised to be extra cautious with messages and calls requesting personal data, passwords, card numbers, or one-time payment confirmation codes.
