Sofia city prosecutors have charged a 19-year-old man with breaking into the websites of state and local institutions, companies and national media, including BNT and BNR, the Sofia City Prosecutor's Office (SGP) said. He has been detained for up to 72 hours.

On 31 October, prosecutors will ask the Sofia City Court to keep him in custody.

He is charged with illegal access to information systems, copying databases that hold personal data, and illegally changing computer data in an information system. If convicted, he faces 5 to 7 years in prison.

Prosecutors say he downloaded personal data and emails and offered them for sale on online channels and hacker forums. There is evidence that he also urged others to spread "Cobra Stealer", malware that steals information.

The copied databases hold names, phone numbers, personal ID numbers (EGN), physical addresses, emails, purchase histories and other data.

Prosecutors say he acted for financial gain, and that the case is not a minor one.

BTA notes that at the start of the year, officers from the Cybercrime Directorate at the GDBOP, Bulgaria's organised crime agency, arrested people who sent phishing messages to get personal data and bank account details from citizens.