The incident in brief
In May 2026 the Centre of Registers announced that third parties may have obtained more than 600,000 Real Property Register extracts by unlawfully using the login credentials of one of its authorised data recipients. According to the Centre of Registers, the extracts contained names, personal identification numbers, dates of birth and property data, but not contact details, payment information, bank account numbers or documents.
The State Data Protection Inspectorate is investigating on its own initiative and has stated that individual complaints about the incident will not be examined. That is the reason this page exists: the ordinary route of complaining to the regulator is closed for this breach.
Can UK residents be affected?
Yes. A person may appear in Lithuanian property records because they own or previously owned property in Lithuania, inherited property, are a co-owner, hold a registered right, or are named in a document used for registration. Moving to the UK does not remove this information from the Lithuanian register.
How to check your data from the UK
The Centre of Registers provides this information in two ways, and only these two:
- Online, in the Centre of Registers self-service portal, after you confirm your identity electronically.
- In person, at a Centre of Registers customer service office, with an identity document.
What evidence to keep in the UK
- The Centre of Registers notice and screenshots from the self-service portal.
- Suspicious emails, text messages, and the numbers of suspicious callers.
- Alerts from banks or other service providers about unusual activity.
- Evidence of attempted identity misuse.
- Documents showing any financial loss.
Keep a short record of dates, what happened and what you did. Do not send sensitive documents through social media or publish them online.
Reporting fraud in the UK
If you have been a victim of fraud or attempted fraud, keep the evidence and report it. In England, Wales and Northern Ireland, report it to Report Fraud. In Scotland, report it to Police Scotland on 101.
Compensation: what the law says
Compensation is not automatic merely because a personal data breach occurred. Article 82 of the GDPR gives a right to compensation for material or non-material damage caused by an infringement, but a person must show damage actually suffered and a causal link with the infringement.
Financial loss is not the only form of damage. The Court of Justice of the European Union has held that a well-founded fear that personal data may be misused in the future can, in certain circumstances, be non-material damage. That case concerned a cyberattack on Bulgaria's National Revenue Agency. Such fear may count where it was genuinely experienced and is supported by the specific circumstances. The Court has also held that even a short loss of control over personal data may be non-material damage, provided the person shows that they actually suffered it.
How claims may be pursued
ZABULIS LEGAL, APB is gathering and assessing information from affected people and considering the appropriate next legal steps. Claims may be pursued individually or together, depending on the circumstances and the approach ultimately chosen. Submitting the form does not mean that proceedings will be brought. How and where a claim would be pursued, together with all terms and risks, is explained before you sign a legal services agreement.
Working with Zabulis Legal from the UK
Contact at this stage is in writing: you submit the online form, and Zabulis Legal may contact you about documents or further details. You do not need to travel to Lithuania to submit the form. Whether any later step needs your attendance depends on the circumstances and will be explained separately.
What happens after you submit the form
- 01
You submit the public NTR form
It does not create a solicitor-client relationship and does not commit you to taking legal action.
- 02
Zabulis Legal reviews the information
And, if needed, contacts you about documents or further details.
- 03
If Zabulis Legal can assist you, you receive a legal services agreement
All terms and risks are explained before you sign it.
- 04
The initial administration payment is EUR 50 plus VAT, where applicable
Fees for legal services, including the preparation of procedural documents and representation, are governed by the legal services agreement, and the exact payment terms are explained before you sign it.
- 05
Clients are informed by email of material developments
Written contact helps us verify who we are communicating with and handle your information securely.
Can UK residents be affected?
Yes. What matters is whether your personal data was in Lithuania's Real Property Register, not where you live now.
How can I check from the UK whether my data was exposed?
In the Centre of Registers self-service portal after confirming your identity electronically, or in person at a Centre of Registers customer service office. The Centre of Registers does not provide this information by telephone or email.
Can I seek compensation if I have not lost money?
Possibly. Non-material damage, such as a genuinely experienced and well-founded fear that your data will be misused, can be compensated, but the damage and its link with the incident must be shown. Nothing is automatic.
Do I have to bring a claim in Lithuania?
It depends on the circumstances and the approach chosen, including whether a claim is pursued individually or together. The court and procedure are explained before you sign a legal services agreement.
Do I need to travel to Lithuania?
Not to submit the form. Whether any later step needs your attendance depends on the circumstances and will be explained separately.
What evidence should I keep?
The Centre of Registers notice or portal screenshots, suspicious messages and callers' numbers, alerts from banks or other providers, and documents showing any financial loss.
What happens after I submit the form?
Zabulis Legal reviews your information and may contact you about documents. If Zabulis Legal can assist you, you receive a legal services agreement. The initial administration payment is EUR 50 plus VAT, where applicable; fees for legal services are governed by the agreement, and the exact payment terms are explained before you sign it.
This page states the law of England & Wales and Lithuania as at 6 October 2026. It is general information, not advice on your matter, and reading it does not create a solicitor-client relationship.
Legal research, SEO/GEO structure, localisation and editing: Veranika Rusakovich, Pensne Digital