Romania's intelligence service attributes a cyber attack on a government email service to the FSB-linked group Turla
11 Nov 2026 · Romania · Official attribution
On 11 November 2026 Romania's Intelligence Service (SRI) said it had identified and stopped a cyber attack on the email service of a Romanian government body, carried out in December 2025, and attributed it to Turla, a group linked to Russia's FSB. According to the SRI, no data were exfiltrated.
Established by. Formal attribution by Romania's Intelligence Service (SRI), as reported by The Irish Times.
Latest. Attack stopped; no data exfiltration reported. Attribution announced on 11 November 2026.
Link to the war against Ukraine. Romania borders Ukraine and hosts NATO forces and logistics supporting Ukraine; the SRI attributed the operation to a group linked to Russia's security service.
Open in the interactive hub → ↑ Beyond Ukraine
Use this record. Quote the figures with the source and date named on this page; in statements, briefings and reporting cite the original body, not this site. The data are open (CC BY 4.0).
Open data (CC BY 4.0) Subscribe to updates Report an error Method & corrections
Sections: Case files · Historical dossiers · Fact-checks · UN on the record · Beyond Ukraine · The world's response · Negotiations track · Sanctions · Research & analysis · Research desk
Languages: English · Français · Español · Русский · العربية · 中文
Page generated 2026-11-12 · CC BY 4.0