Russian hackers have hacked into hundreds of email accounts belonging to Ukrainian prosecutors and law enforcement officials
According to data analysed by Reuters, hackers linked to Russia have gained access to more than 170 email accounts belonging to prosecutors and investigators in Ukraine over the past few months.
Information about the breaches became available due to a mistake by the hackers themselves, who left some of the data publicly accessible on the internet. It was discovered by the cyber threat research group Ctrl-Alt-Intel from the US and the UK. The server contained breach logs and thousands of stolen emails.
According to the researchers’ estimates, at least 284 email accounts were compromised between September 2024 and March 2026. Most of them belonged to Ukrainian users, but there were also victims from NATO countries and the Balkans.
The researchers link the campaign to a group of hackers known as Fancy Bear, which is believed to be linked to Russian military structures. Some experts agreed that the attack had links to Moscow, though not all confirmed the involvement of this particular group.
Among the targets were the accounts of the Specialised Prosecutor’s Office for Defence, the Asset Recovery and Management Agency (ARMA) and the Prosecutors’ Training Centre in Kyiv. In particular, the email accounts of 44 employees of the centre were hacked, including those of Deputy Director Oleg Duk.
The data also indicates that information was accessed from at least one employee of the Specialised Anti-Corruption Prosecutor’s Office (SAPO). Among those affected is the former head of ARMA, Yaroslava Maksymenko.
Ukraine’s Computer Emergency Response Team reported that it is aware of the incident and has already investigated some of the cases.
Apart from Ukraine, hackers gained access to email accounts in a number of other countries. In Romania, at least 67 accounts were hacked, including those linked to the air force and NATO bases. In Greece, 27 email accounts belonging to the General Staff of National Defence were hacked, including those of military attachés.
In Bulgaria, at least four email accounts belonging to local officials in the province of Plovdiv were hacked. Representatives of academic and military institutions in Serbia were also targeted.
The targets of the attacks even included institutions in Russian-controlled territories, notably a hospital in Pokrovsk and the city’s finance committee.
Follow us on Telegram
