Loading signal...
Signal
Submitted
Apr 28, 2026, 14:21 UTC
The German Federal Office for the Protection of the Constitution (BfV) warned that Russian state-backed cyberattacks target German NGOs and scientific organizations, with extensive email spying reported on some groups since 2024.
In March 2025, the German Federal Office for the Protection of the Constitution (BfV) issued a comprehensive warning about ongoing Russian cyber espionage against German civil society organizations. Notably, the German Society for Eastern European Studies (DGO) was labeled an "extremist organization" by Russia in July 2024, and hackers accessed its email communications for months. The BfV has circulated a detailed sensitization paper to dozens of NGOs and scientific bodies, reporting increased targeting of groups linked to political, societal research, activism, or cultural collaboration, even if not yet blacklisted by Russia. Similar designations have been made against the German Council on Foreign Relations (DGAP). German authorities note difficulties attributing cyber attacks but have linked many operations to Russia, including the 2015 Bundestag hack and the 2023 attack on the SPD attributed to Russia's GRU. The Federal Criminal Police Office (BKA) has reorganized its cybercrime units to better combat state-sponsored cyber espionage, expecting further increases in attacks. The BfV recommends enhanced security measures and information sharing among NGOs. This activity reflects a broader Russian strategy to restrict foreign NGO operations and gather intelligence via cyber means in Germany.
Confidence: High
The article clearly details Russian state-sponsored cyber espionage actions against German NGOs and scientific groups, including hacking and data access, with official government attribution to Russian actors such as the GRU. The warning and sensitization by German intelligence demonstrate a concrete aggressive incident and threat.
Source URL
https://tagesschau.de/investigativ/ndr-wdr/cyberspionage-russland-ngo-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "8dca9e14-2f77-429c-8c05-e1adf1a48b01",
"url": "https://tagesschau.de/investigativ/ndr-wdr/cyberspionage-russland-ngo-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"Russian cyber espionage",
"NGOs",
"German Society for Eastern European Studies",
"Federal Office for the Protection of the Constitution",
"offensive cyber operations",
"GRU",
"Federal Criminal Police Office",
"cyberattacks",
"German Council on Foreign Relations",
"attribution"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "German domestic intelligence warns German NGOs are targeted by Russian cyber espionage",
"description": "The German Federal Office for the Protection of the Constitution (BfV) circulated a detailed warning to dozens of German NGOs and scientific organizations in March 2025 about Russian state-sponsored cyberattacks targeting their IT systems. The German Society for Eastern European Studies (DGO) was publicly labeled \"extremist\" by Russia in July 2024, and hackers had secretly accessed its email communications for months. The BfV's sensitization paper highlights that Russian actions include labeling organizations \"undesirable\" or \"extremist\" accompanied by cyber intrusions. Other organizations such as the German Council on Foreign Relations (DGAP) have also been declared unwanted by Russia. German authorities acknowledge the difficulty of cyberattack attribution but have maintained a formal attribution process since 2021 involving multiple ministries and intelligence agencies. Past major Russian cyber incidents include the 2015 Bundestag hack and a 2023 cyberattack on the SPD linked to Russia's GRU. The Federal Criminal Police Office (BKA) restructured its cyber units in 2024 to better respond to state cyber espionage, with an expectation of increasing attacks. The BfV recommends technical security improvements and cooperative information exchange among targeted organizations.",
"summary_short": "The German Federal Office for the Protection of the Constitution (BfV) warned that Russian state-backed cyberattacks target German NGOs and scientific organizations, with extensive email spying reported on some groups since 2024.",
"summary_extended": "In March 2025, the German Federal Office for the Protection of the Constitution (BfV) issued a comprehensive warning about ongoing Russian cyber espionage against German civil society organizations. Notably, the German Society for Eastern European Studies (DGO) was labeled an \"extremist organization\" by Russia in July 2024, and hackers accessed its email communications for months. The BfV has circulated a detailed sensitization paper to dozens of NGOs and scientific bodies, reporting increased targeting of groups linked to political, societal research, activism, or cultural collaboration, even if not yet blacklisted by Russia. Similar designations have been made against the German Council on Foreign Relations (DGAP). German authorities note difficulties attributing cyber attacks but have linked many operations to Russia, including the 2015 Bundestag hack and the 2023 attack on the SPD attributed to Russia's GRU. The Federal Criminal Police Office (BKA) has reorganized its cybercrime units to better combat state-sponsored cyber espionage, expecting further increases in attacks. The BfV recommends enhanced security measures and information sharing among NGOs. This activity reflects a broader Russian strategy to restrict foreign NGO operations and gather intelligence via cyber means in Germany.",
"actor_primary": "GRU",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly details Russian state-sponsored cyber espionage actions against German NGOs and scientific groups, including hacking and data access, with official government attribution to Russian actors such as the GRU. The warning and sensitization by German intelligence demonstrate a concrete aggressive incident and threat.",
"event_time_utc": "2025-03-21T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:21:00.788Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
B
Info credibility
3
Event time
Mar 21, 2025, 00:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
GRU
Country
Germany
Countries
Germany
Tags
Russian cyber espionage, NGOs, German Society for Eastern European Studies, Federal Office for the Protection of the Constitution, offensive cyber operations, GRU, Federal Criminal Police Office, cyberattacks, German Council on Foreign Relations, attribution
Nodes
Node 2: 5th Column
Signal
Submitted
Apr 28, 2026, 14:21 UTC
The German Federal Office for the Protection of the Constitution (BfV) warned that Russian state-backed cyberattacks target German NGOs and scientific organizations, with extensive email spying reported on some groups since 2024.
In March 2025, the German Federal Office for the Protection of the Constitution (BfV) issued a comprehensive warning about ongoing Russian cyber espionage against German civil society organizations. Notably, the German Society for Eastern European Studies (DGO) was labeled an "extremist organization" by Russia in July 2024, and hackers accessed its email communications for months. The BfV has circulated a detailed sensitization paper to dozens of NGOs and scientific bodies, reporting increased targeting of groups linked to political, societal research, activism, or cultural collaboration, even if not yet blacklisted by Russia. Similar designations have been made against the German Council on Foreign Relations (DGAP). German authorities note difficulties attributing cyber attacks but have linked many operations to Russia, including the 2015 Bundestag hack and the 2023 attack on the SPD attributed to Russia's GRU. The Federal Criminal Police Office (BKA) has reorganized its cybercrime units to better combat state-sponsored cyber espionage, expecting further increases in attacks. The BfV recommends enhanced security measures and information sharing among NGOs. This activity reflects a broader Russian strategy to restrict foreign NGO operations and gather intelligence via cyber means in Germany.
Confidence: High
The article clearly details Russian state-sponsored cyber espionage actions against German NGOs and scientific groups, including hacking and data access, with official government attribution to Russian actors such as the GRU. The warning and sensitization by German intelligence demonstrate a concrete aggressive incident and threat.
Source URL
https://tagesschau.de/investigativ/ndr-wdr/cyberspionage-russland-ngo-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "8dca9e14-2f77-429c-8c05-e1adf1a48b01",
"url": "https://tagesschau.de/investigativ/ndr-wdr/cyberspionage-russland-ngo-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"Russian cyber espionage",
"NGOs",
"German Society for Eastern European Studies",
"Federal Office for the Protection of the Constitution",
"offensive cyber operations",
"GRU",
"Federal Criminal Police Office",
"cyberattacks",
"German Council on Foreign Relations",
"attribution"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "German domestic intelligence warns German NGOs are targeted by Russian cyber espionage",
"description": "The German Federal Office for the Protection of the Constitution (BfV) circulated a detailed warning to dozens of German NGOs and scientific organizations in March 2025 about Russian state-sponsored cyberattacks targeting their IT systems. The German Society for Eastern European Studies (DGO) was publicly labeled \"extremist\" by Russia in July 2024, and hackers had secretly accessed its email communications for months. The BfV's sensitization paper highlights that Russian actions include labeling organizations \"undesirable\" or \"extremist\" accompanied by cyber intrusions. Other organizations such as the German Council on Foreign Relations (DGAP) have also been declared unwanted by Russia. German authorities acknowledge the difficulty of cyberattack attribution but have maintained a formal attribution process since 2021 involving multiple ministries and intelligence agencies. Past major Russian cyber incidents include the 2015 Bundestag hack and a 2023 cyberattack on the SPD linked to Russia's GRU. The Federal Criminal Police Office (BKA) restructured its cyber units in 2024 to better respond to state cyber espionage, with an expectation of increasing attacks. The BfV recommends technical security improvements and cooperative information exchange among targeted organizations.",
"summary_short": "The German Federal Office for the Protection of the Constitution (BfV) warned that Russian state-backed cyberattacks target German NGOs and scientific organizations, with extensive email spying reported on some groups since 2024.",
"summary_extended": "In March 2025, the German Federal Office for the Protection of the Constitution (BfV) issued a comprehensive warning about ongoing Russian cyber espionage against German civil society organizations. Notably, the German Society for Eastern European Studies (DGO) was labeled an \"extremist organization\" by Russia in July 2024, and hackers accessed its email communications for months. The BfV has circulated a detailed sensitization paper to dozens of NGOs and scientific bodies, reporting increased targeting of groups linked to political, societal research, activism, or cultural collaboration, even if not yet blacklisted by Russia. Similar designations have been made against the German Council on Foreign Relations (DGAP). German authorities note difficulties attributing cyber attacks but have linked many operations to Russia, including the 2015 Bundestag hack and the 2023 attack on the SPD attributed to Russia's GRU. The Federal Criminal Police Office (BKA) has reorganized its cybercrime units to better combat state-sponsored cyber espionage, expecting further increases in attacks. The BfV recommends enhanced security measures and information sharing among NGOs. This activity reflects a broader Russian strategy to restrict foreign NGO operations and gather intelligence via cyber means in Germany.",
"actor_primary": "GRU",
"target_primary": null,
"location_text": "Germany",
"location_region": null,
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly details Russian state-sponsored cyber espionage actions against German NGOs and scientific groups, including hacking and data access, with official government attribution to Russian actors such as the GRU. The warning and sensitization by German intelligence demonstrate a concrete aggressive incident and threat.",
"event_time_utc": "2025-03-21T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:21:00.788Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
B
Info credibility
3
Event time
Mar 21, 2025, 00:00 UTC
Event time confidence
exact
Location
Germany
Primary actor
GRU
Country
Germany
Countries
Germany
Tags
Russian cyber espionage, NGOs, German Society for Eastern European Studies, Federal Office for the Protection of the Constitution, offensive cyber operations, GRU, Federal Criminal Police Office, cyberattacks, German Council on Foreign Relations, attribution
Nodes
Node 2: 5th Column