Cyprus identified among EU states hit by Russia-linked cyberattacks

A briefing published by the European Parliamentary Research Service (EPRS) on Monday identified Cyprus as one of several EU member states that have experienced cyberattacks linked to Russian activities. These incidents, which occurred amid a broader pattern of hybrid warfare, involved intrusions into government networks and acts of sabotage against critical infrastructure. Other nations affected include France, Germany, Poland, the Netherlands, Austria, Slovakia, Romania, and Finland.

In July 2026, EU member states formally condemned these malicious cyber operations, which have been attributed to a combination of state and non-state actors. This spectrum of entities ranges from intelligence services and private companies to cybercriminal groups and hacktivists. The report highlights that cyberspace is increasingly utilized as a theater for hybrid operations, threatening military command systems, essential services, and national security.

The EPRS briefing contextualizes these events within an increasingly unstable European security environment that has persisted since the 2022 full-scale invasion of Ukraine. Hostile actors are reportedly exploiting existing vulnerabilities through methods that fall below the threshold of traditional armed conflict, such as the instrumentalisation of migration and drone activity. These hybrid challenges continue to place significant operational and financial strain on European defense systems, necessitating ongoing vigilance across the union.