A court on 31 October ordered the 19-year-old accused in a case involving cyberattacks against Bulgarian institutions, BNT and BNR to remain in custody. The decision concerns a pretrial measure, not a conviction, and can be appealed.
Prosecutors allege unauthorised access to information systems, copying of databases containing personal information for financial gain and unlawful changes to computer data. The investigation began on 28 October under the supervision of the Sofia City Prosecutor’s Office.
The alleged data included names, telephone numbers, national identification numbers, addresses, emails and purchase histories. Prosecutors say information was offered through online channels and hacking forums. These remain allegations to be tested in the proceedings, rather than facts established by a final judgment.
The defence sought bail or house arrest and disputed the connection between the accused and the breaches. The court accepted that there was a risk of another offence, while finding no risk of absconding. The dispute over the evidence will continue separately from the immediate detention decision.
The case brings together two different questions: who was responsible for the alleged intrusions, and how the affected organisations protected the information they held. A criminal investigation into an individual does not, by itself, provide a complete technical audit of every affected system.
For readers, the important distinction is between an allegation, a judicial decision about custody and a finding of guilt. At this stage, the confirmed development is continued pretrial detention. The accused retains the presumption of innocence, and the ruling remains subject to review.
