Russian Military Hackers Compromised 284 Inboxes Across Ukrainian Prosecutors and NATO Allies
Russian-linked hackers broke into more than 170 email accounts belonging to Ukrainian prosecutors and investigators between September 2024 and March 2026, compromising a total of 284 inboxes, according to a Reuters exclusive based on data inadvertently exposed by the hackers and discovered by the
The collection pattern (Ukrainian prosecutors and investigators, Romanian Air Force accounts including NATO airbases, Greek defense attaches, Balkan officials) traces the institutional network feeding Hague war crimes investigators, pointing to GRU's priority collection against prosecution strategy, witness identification, and international legal cooperation pathways that could produce ICC proceedings against Russian commanders, per a Reuters exclusive sourced to researchers who accessed the exposed infrastructure directly. The newly disclosed 18-month window (September 2024--March 2026) places the operation running alongside the ICC's expanding Russian war crimes docket, tying collection tempo to investigative escalation. Ukrainian prosecutors may be high-value SIGINT targets regardless of war crimes priority, but that explanation is weakened by the NATO-ally targeting skewed toward legal and defense attaches rather than operational forces.