Cybersecurity — 2026-04-16
Russia-linked operators breached 284 mailboxes since Sept 2024, including Ukrainian prosecutors and NATO accounts
Ukrainian cyber authorities and allied analysts disclosed this week a Russia-linked campaign that has compromised at least 284 mailboxes between September 2024 and March 2026, including accounts of
Analysis
The 18-month duration and targeting set mark this as a strategic collection operation consistent withGRU Unit 26165 and FSB Center 18 historical priorities; the goal was long-horizon intelligence production, not disruption. The sharpest exposure is Ukrainian prosecutor files on collaborationist cases and war-crimes documentation: if Russian counterintelligence can map informant networks from that material, the consequences are direct and operational. Dutch intelligence's public framing of long-term Kremlin confrontation aligns with the operation's profile (per primary Dutch sourcing carried by The Record; the 284-mailbox figure warrants CERT-UA cross-check before full confidence). Further named-victim disclosures from EU and Ukrainian authorities are likely within the next month.
The 18-month duration and targeting set mark this as a strategic collection operation consistent with