Information Warfare — 2026-06-24

Ukrainian Hackers Breach Russia Glaz Groza Battlefield Combat Control System Exposing Military Documents and Disrupting Operations

BLUFRussia will likely restore Groza access by early July, but the exfiltrated patent and training materials offer Ukraine a lasting window into Russian drone-to-artillery coordination architecture.

The "Where Is Russia Today" community reported on June 23 that Eastern European contributors shared Telegram screenshots indicating Russia's Glaz/Groza battlefield targeting application had been breached, with cartographic data replaced by Ukrainian flag imagery 1. Militarnyi and TechRadar reported that Groza coordinates drone operators, field commanders, and artillery units in the reconnaissance-to-fire chain, and that software distribution and user support ran through Telegram groups 23. Exfiltrated materials reportedly include hundreds of pages of user guides, training videos, and a patent attributing the platform to Russian company Media Effect 23. WhereIsRussiaToday cited widespread user complaints of inability to connect or remove reappearing Ukrainian flag images, with administrators still working to restore functionality 12.

Analysis
Russian forces will likely restore operational access to Groza by July 7, since the Telegram-based distribution model that exposed the system also enables rapid software reissuance to field units. The more durable intelligence gain is the exfiltrated patent and training library, which maps Russia's drone-to-artillery coordination architecture and platform integration dependencies. Analytic confidence is low: all reporting traces to WhereIsRussiaToday, a single open-source aggregator, with no independent technical confirmation of breach scope or system-wide disruption. The breach may reflect access to a legacy or training instance rather than the live operational network, limiting actual disruption to the fire coordination chain. If restoration holds by July 7, Ukrainian planners cannot assume sustained degradation of the kill chain; failure past that window widens tactical exploitation opportunities along active fronts.

5 sources