CSIDB logo
Incident

Belarus

Incident posture

Attack window
May 2022
Location
Italy
Status
Historical
CIA posture
Available to members
Updated
2025-10-18 00:00

Linked entities

Victim
Belarus
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
May 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A cyber incident disrupted digital services for a Belarusian government entity, specifically impacting the availability of online platforms associated with its foreign affairs and defense ministries. The disruption resulted in extended periods of inaccessibility for critical public-facing websites, impairing routine administrative functions and external communications. This service degradation represented a significant operational challenge for the affected governmental bodies during the event.

Motives

Detailed motive labels are available to members.

7 motives

TTPs

Detailed technique labels are available to members.

2 techniques

Description

On May 29, 2022, the official websites of Italy’s Ministry of Foreign Affairs and Ministry of Defense became inaccessible to public users, displaying no active content or error messages indicating maintenance. The outage occurred without prior announcement from either government institution, disrupting standard access to diplomatic communications, consular services, and defense-related information portals. No immediate claims of responsibility or technical explanations emerged during the initial hours of the disruption. The incident coincided with broader European cybersecurity concerns following geopolitical tensions, though no explicit linkage to external threat actors was confirmed by Italian authorities at the time. Both ministries’ web presences remained offline for an undetermined duration, limiting citizens’ ability to access visa application systems, travel advisories, or official statements.

The unavailability of these critical government platforms hindered routine administrative functions and public information dissemination during the outage period. No ancillary systems, such as internal email networks or classified defense databases, were confirmed compromised in public reporting. Italian technical teams initiated restoration efforts, though specific remediation steps—such as server reboots, traffic rerouting, or infrastructure audits—were not disclosed. The incident did not trigger collateral disruptions to other government services or private sector networks based on available information. Service restoration timelines and root cause analyses remained unspecified in public channels following the event.

Sources

Sources available to members: 1 source.

CSIDB