MApN's reaction to emails compromised by Russian hackers: “The incident was contained within 24 hours” / The measure taken after the attack
Dozens of email addresses were compromised, but the incident was detected and “contained within 24 hours”, the Ministry of National Defense said after Reuters reported on Wednesday morning that hackers linked to Russian spy services had compromised at least 67 Romanian Air Force email accounts.
MApN says that this security incident “was detected in March of 2025 and involved the compromise of a few dozen email addresses, for another 30 email addresses the exploitation was not successful. The incident was detected, analyzed by the competent structures and isolated within 24 hours”.
According to the ministry, the hackers did not have access to secret data:
“The targeted data were unclassified, currently used for administrative activities and for the circulation of public information, so there was no possibility of accessing or exfiltrating classified data.”
Action taken after the attack
MApN announces that in order to prevent such incidents from happening again, “the cyber security part has been fully taken over at the central level starting from March 2026”.
It also says in the ministry's response, “our institution constantly monitors its own infrastructures and applies measures to eliminate possible vulnerabilities.”
The MApN's reaction came after data analyzed by Reuters showed that hackers with ties to Russia had broken into more than 170 email accounts belonging to prosecutors and investigators across Ukraine in the past few months, as well as emails from Romania, Bulgaria, Greece and Serbia.
Last Wednesday, President Nicușor Dan and the US Department of Justice announced that the FBI, together with several institutions in 15 states, including the Romanian Intelligence Service, had dismantled a protracted cyber attack on sensitive infrastructure in several Western states.
Photo: Dragoscondrea | Dreamstime.com
