<\/p>\n
Article 319b of the Criminal Code<\/strong> addresses one of the most dynamic forms of modern criminality \u2014 unlawful interference with computer data<\/strong>. The law penalizes any person who, without authorization<\/strong>, adds, copies, uses, degrades, conceals, destroys, deletes, damages, alters, or blocks access<\/strong> to information stored in a computer system.<\/p>\n This is often described as \u201cdigital vandalism\u201d<\/strong>: it may appear virtual, but it frequently causes serious real-world consequences \u2014 loss of business information, disruption of commercial processes, collapse of governmental systems, and compromise of sensitive personal data.<\/p>\n Deleting entries in an electronic time-tracking system<\/strong> \u2014 an employee with admin access modifies or deletes records to conceal lateness or absences.<\/p>\n<\/li>\n Manipulating electronic grades in a school system<\/strong> \u2014 a student or parent with hacking skills accesses the school platform and changes grades or attendance.<\/p>\n<\/li>\n Deleting a customer database<\/strong> \u2014 a dismissed employee accesses the system before their access is revoked and destroys client lists, commercial terms, and contracts.<\/p>\n<\/li>\n Installing spyware<\/strong> \u2014 a person with access installs software that secretly copies and exfiltrates sensitive information (passwords, photos, business correspondence).<\/p>\n<\/li>\n Altering records in accounting software<\/strong> \u2014 a person with credentials manipulates accounting entries to hide abuse or falsify financial results.<\/p>\n<\/li>\n Downloading and disseminating personal data from a medical system<\/strong> \u2014 unlawful access to an electronic health record and export of sensitive patient data (conditions, diagnoses, prescriptions).<\/p>\n<\/li>\n Altering results of a tender or competition on an e-platform<\/strong> \u2014 access is used to change submitted bids or results to favor a particular candidate.<\/p>\n<\/li>\n \u201cBlack-hat\u201d security testing without authorization<\/strong> \u2014 a programmer intrudes into another\u2019s network under the pretext of testing but alters data or leaves backdoors.<\/p>\n<\/li>\n<\/ul>\n The sanction depends on the circumstances. In its basic form<\/strong>, the law provides imprisonment of up to six years<\/strong> and a fine of up to BGN 10,000<\/strong>. If the act is repeated<\/strong>, committed in complicity<\/strong>, or causes significant damage<\/strong>, the sanction increases to up to seven years\u2019 imprisonment<\/strong> and a fine of up to BGN 20,000<\/strong>. The most serious cases<\/strong> \u2014 e.g., acts on behalf of or pursuant to a decision of an organized criminal group<\/strong>, or attacks against government administration computer systems<\/strong> or critical infrastructure<\/strong> \u2014 are punishable by up to twelve years\u2019 imprisonment<\/strong> and a fine of up to BGN 30,000<\/strong>.<\/p>\n Bulgarian case-law includes numerous instances. An illustrative case involved a young IT specialist who, after a dispute with his employer, encrypted the company\u2019s server and demanded payment<\/strong> in exchange for the decryption key (ransomware). The case ended with an effective prison sentence, despite the damage later being compensated.<\/p>\n This offence highlights how vulnerable even well-protected systems can be when the human factor<\/strong> intervenes with bad faith. Article 319b<\/strong> is therefore crucial in contemporary digital justice: it protects not merely \u201ccomputers,\u201d but the economic, institutional, and personal stability<\/strong> that depends on them.<\/p>\n If you or a relative has been a victim of a computer crime, consult a criminal-law attorney<\/strong> who can advise and represent you in court. This article does not constitute legal advice by Attorney Mihail Tomov and is not related to any specific situation or subject.<\/strong> For legal assistance in matters involving computer crimes, or any criminal-law case, you should obtain a dedicated legal consultation.<\/p>\nIllustrative examples under Article 319b CC (unlawful interference with computer data):<\/h4>\n
\n
Penalties<\/h4>\n
Practice<\/h4>\n