Romanian government institutions have become the target of a large-scale, coordinated wave of cyberattacks carried out by hacker groups linked to Russia, according to The Record.
Romanian Defense Minister Radu Miruța said on Tuesday at a conference in Bucharest that the country’s public sector faces more than 10,000 hacking attempts daily. He noted that a wide range of agencies is under attack, and the assaults are systematic in nature. Previously, officials had warned that key cyber operations against Romania are coordinated from Moscow due to the country’s strategic position on the Black Sea, its NATO and EU membership, and its active support for Ukraine and Moldova.
The head of Romania’s National Cybersecurity Directorate, Dan Cîmpean, confirmed that Romanian networks are being targeted by both ordinary ransomware hackers and state-sponsored groups. He emphasized that these attacks are carefully planned and often coincide with major political decisions, particularly those related to aid for Kyiv.
In recent months, several major ransomware incidents have affected critical sectors, including the national water agency and energy companies. Responsibility for some of these attacks has been claimed by Russian-speaking groups such as Qilin and Gentlemen.
Beyond technical breaches, Romania faces complex hybrid threats and aggressive disinformation campaigns. The Defense Minister cited recent fake reports claiming that 800 wounded U.S. soldiers had arrived at a Romanian airbase for distribution to local hospitals. Radu Miruța described these claims as entirely unfounded, explaining that such falsehoods are spread deliberately to create panic and undermine trust in government institutions and the country’s strategic partners.
Experts agree that the cyberattacks and disinformation campaigns are part of a unified strategy of external pressure aimed at destabilizing Romania as a key logistical and political hub on NATO’s eastern flank.
