Romanian Public Bodies Bought Banned Kaspersky Software, Records Show

· Investigations · Romania

Procurement records reviewed by OCCRP show that 83 Romanian public entities purchased cybersecurity products from the Russian company Kaspersky after it was blacklisted over national security concerns. The buyers include a defense contractor that works with NATO. The purchases continued despite the restrictions, which were imposed because of fears that the company's software could be used for espionage or sabotage. The records detail which institutions bought the products and when, revealing a gap between the official blacklist and actual procurement on the ground. The finding raises questions about how effectively Romania, a NATO and EU member, enforces its own security rules, and whether other public bodies in Europe have similar undisclosed dependencies on blacklisted vendors.

Why it matters：The case highlights how difficult it is for governments to enforce supply-chain bans on foreign technology vendors, and it could prompt wider audits of public procurement across Europe.

Key points

  • 83 public entities in Romania purchased Kaspersky products after the blacklist, per procurement records.
  • One buyer was a defense and NATO research contractor.
  • The software was banned over national security concerns.
  • The findings raise questions about enforcement of security restrictions.

Sources (original reporting)

More stories from this day