Sofia City Prosecutor's Office has charged a 19-year-old man with breaking into the websites of state and local government bodies, firms, and national broadcasters BNT and BNR, and with stealing and selling personal data. He can be held for up to 72 hours.

Officers from the Chief Directorate for Combating Organised Crime (GDBOP) arrested him in Sofia on Wednesday, 28 October.

How it all started: Police arrest 19-year-old over cyber attacks on firms, state bodies, BNT and BNR

He is charged with illegal access to information systems, copying databases of personal data and illegally changing computer data in an information system. Prosecutors say the case is not minor and that he did it for financial gain.

The stolen data includes names, phone numbers, personal ID numbers, home addresses, emails, purchase histories and more.

Prosecutors also say they have information that the accused urged others to spread "Cobra Stealer", a malicious program built to steal information.

The offence carries a prison sentence of five to seven years. Early this year, the cybercrime unit of GDBOP caught people who sent phishing messages to drain personal data and bank accounts from citizens.

On 31 October, Sofia City Prosecutor's Office will ask Sofia City Court to order that the accused be held in custody.