Lithuanian authorities are investigating a breach of national government registers covering 600,000+ real estate and legal entity records. The attack vector was compromised institutional credentials (T1078 — Valid Accounts) rather than a software exploit. Officials publicly suspect Russian state-affiliated involvement, though attribution remains unconfirmed. The exposure creates intelligence collection, influence operations, and targeting risk for Lithuanian nationals, government-linked individuals, and institutional actors. The defensive relevance for enterprise teams is the credential hygiene and bulk data access detection model the incident demonstrates.