Russian hackers compromise government email servers in Romania and Kazakhstan

# Russian hackers compromise government email servers in Romania and Kazakhstan

https://gcdradar.vercel.app/incidents/russian-hackers-compromise-government-email-servers-in-roman · AIR-2026-1856 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed real-world breach and espionage campaign against government targets.
- Fix status: No fix needed
- First reported: 2026-11-10
- AI role: No AI role

## Summary

Russian state-linked hackers compromised government email servers in Romania and Kazakhstan to intercept correspondence with NATO and EU officials. Researchers revealed the covert espionage campaign affecting diplomatic communications.

## What to do

Investigate server logs for unauthorized access and review government email security controls.

## Latest updates

- 2026-11-12: Intelligence agency reports stopping the cyber-espionage campaign before data exfiltration occurred (https://therecord.media/romania-russia-cyberattack-emails)
- 2026-11-10: Russian hackers compromised government email servers to steal NATO, EU correspondence (https://therecord.media/russia-hackers-espionage-romania-kazakhstan)

## Sources

- 2026-11-10 The Record: Russian hackers compromised government email servers to steal NATO, EU correspondence https://therecord.media/russia-hackers-espionage-romania-kazakhstan
- 2026-11-12 The Record: Romania says it stopped Russian cyberattack targeting government emails https://therecord.media/romania-russia-cyberattack-emails

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.