Adversary Intelligence — 2026-05-25

Hackers Breach Russias Social Design Agency Exposing Active Disinformation Operations Across Six Countries

BLUFFormal Armenian citation of erevan.one as a Russian interference vector before the June vote is unlikely, leaving Western governments with attribution evidence but no procedural lever to act on it pre-election.

Hackers leaked internal Social Design Agency documents to Delfi Estonia reporters, who shared the files with OCCRP and partners; the materials detail influence operations across Armenia, France, Ukraine, Germany, Moldova, and Norway 12. Per an internal spreadsheet in the same cache, the leaked chats belong to EU-sanctioned Russian Presidential Administration official Sofia Zakharova, whose messages reference awaiting approval from first deputy chief of staff Sergei Kiriyenko 1. Documented operations include the September 2025 Paris mosque pig-head attacks, pig heads marked with 'Macron' placed at nine mosques, for which Serbian courts convicted three men citing Russian intelligence direction, and false-flag vandalism campaigns in France and Germany 1. The files also name local collaborators including a retired US general and a former Bundestag member, and outline an election interference plan targeting Armenia's June 7 parliamentary vote through erevan.one, with an internal document titled 'Programme for work in the anti-Pashinyan direction for 2026' aiming to frame the vote as a referendum against the prime minister personally 12. The UK government independently sanctioned 49 SDA employees on May 11, 2026 over the Armenia interference operation, corroborating the leaked documents' account of Kremlin direction.

Analysis
Erevan.one is unlikely to receive formal citation from Armenian electoral authorities or an OSCE/ODIHR observer mission before end of June, constraining pre-election action against a named interference vector. Low confidence reflects the single OCCRP investigative source chain and absence of independent official corroboration. The leak advances Western governments' evidentiary position on Kremlin direction, naming Armenia as the SDA's near-term electoral target. The cache could represent a selective release by a competing intelligence service, surfacing authentic material to accelerate European pressure before the June 7 vote. A formal citation before that date would give EU and US policymakers standing for pre-election sanctions or takedown requests against erevan.one. Without one, coordinated action defers to post-election observer reports by which point the operation will have run its course.

2 sources