December 2021 leak of about 637,000 records (separate incident; link to the April database not established)
Status: Investigation reported; arrests reported with conflicting counts; no final court outcome found.
Summary
On 22 December 2021 Exit reported a leak of fiscal and employment data on 637,138 people, which it said may have come from tax records. The Tirana Prosecution said it would investigate the authenticity and source of the data. Prime Minister Edi Rama apologised on 23 December and attributed the leak to internal infiltration rather than an external breach. In January 2022 arrests were reported, but sources give different counts (two per Exit, four per ACQJ).
Exit and ACQJ treat the December incident as separate from the April 2021 database. The sources reviewed do not connect the two, so this case is recorded only for context and is not part of the findings on the patronazhistet case.
Key facts
- Exit reported the leak on 22 December 2021: 637,138 people, fiscal data (per Exit).
- The Tirana Prosecution said it would investigate authenticity and source (Exit).
- PM Rama apologised on 23 December 2021 and cited internal infiltration (Exit, ACQJ).
- January 2022: arrests reported; Exit says two, ACQJ says four. The conflict is unresolved.
The record
Four lists kept apart on purpose: what is established, what is only alleged, what is still open, and what those concerned said.
What is proven (1)
Established by documents or official records, as stated in the research. A recorded charge or indictment proves only that the accusation was made.
- Exit reported the leak of 637,138 records on 22 December 2021; the Prime Minister's apology is reported by Exit and ACQJ.
What is alleged (1)
Accusations, not findings. Those accused are presumed innocent.
- AllegationThat the data came from a state agency (sources differ on which).
Allegations and who made them (1)
Each line is an allegation as recorded, with the person or body that made it where the record names them.
- AllegationCivil-society commentators (ACQJ) said the 'internal infiltration' explanation was not convincing.
Open questions (2)
- Who was arrested in January 2022, and on what charge?
- Is there any link to the April 2021 patronage database? None found.
Responses (1)
Responses of the people and organisations concerned, as recorded.
- Edi Rama (23 December 2021): apologised; said preliminary analysis pointed to internal infiltration (Exit, ACQJ).
Timeline
Full timeline →Police
Separate leak of 637,138 records reported; Tirana Prosecution to investigate
Exit reports a leak of fiscal and employment data on 637,138 people; the Tirana Prosecution says it will investigate. No link to the April 2021 database is made in the reporting reviewed. See case-second-civil-data-leak-2021-12.
Government
Rama apologises for the December leak and cites internal infiltration
Rama apologised for the December 2021 leak and said preliminary analysis pointed to internal infiltration rather than an external cyber attack. Critics questioned the explanation. This is not a finding about the April 2021 database.
Police
Arrests reported over the December leak (counts conflict)
Exit reports two arrests on 7 January 2022. ACQJ reports four suspects arrested on 7 January 2022. Both link the arrests to the later breaches, not to the April 2021 database.
Connections
- Hypothesis←Patronazhistet scandal: the Socialist Party's patronage network and the April 2021 voter databaseSource label: Unverified
Not linked: separate December 2021 leak; one outlet's analysis suggests a shared source, unconfirmed
Evidence: Exit and ACQJ treat the incidents as separate. Shqiptarja's salary-list analysis (one outlet) suggests a shared source.
Sources for this record
Every source the research cites for this record, grouped by its source label. 4 sources.
Source label: Officially reportedOfficially reported · 2 sources
- Publisher
- Exit News
- Date
- 22 Dec 2021
- Publisher
- Exit News
- Date
- 24 Dec 2021
Source label: Under investigationUnder investigation · 1 source
- Publisher
- Exit News
- Date
- 7 Jan 2022
Source label: DisputedDisputed · 1 source
- Publisher
- ACQJ
- Date
- undated