Cyber Incident Victim: Holy See
Date:
Nov 2022
Location:
Holy See
Summary
The Vatican's official website was taken offline following abnormal access attempts, prompting technical investigations into a suspected hacking incident. The disruption occurred shortly after Moscow criticized the organization's leader for condemning Russia's invasion of Ukraine and singling out specific ethnic minority troops involved in the conflict for their alleged brutality. No further details regarding the attack's origin or technical impact were disclosed by authorities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On November 30, 2022, the Vatican's official website was taken offline following an apparent hacking incident. The Holy See confirmed the disruption, attributing it to abnormal attempts to access the site. Vatican spokesman Matteo Bruni stated that technical investigations were ongoing but provided no additional details regarding the nature of the attack or the identity of the perpetrators. The incident resulted in a complete outage of the primary digital platform for the Holy See, disrupting public access to official communications, liturgical information, and institutional resources. No claims of responsibility or explicit motives were disclosed by Vatican authorities at the time of the initial announcement. The website remained inaccessible for an unspecified duration while technicians worked to restore services and investigate the breach.

The suspected cyberattack occurred one day after the Russian government criticized Pope Francis for remarks made during an interview published in the Jesuit magazine *La Civiltà Cattolica*. In the interview, the Pope had condemned Russia’s invasion of Ukraine and specifically referenced troops from Chechnya and other ethnic minorities within the Russian military, accusing them of exhibiting particular "cruelty" during the conflict. Moscow denounced these comments as a "distortion of reality," escalating diplomatic tensions. While the Reuters article did not explicitly attribute the attack to Russian-affiliated actors, the temporal proximity to this diplomatic dispute and the absence of alternative explanations in official statements contextualized the incident within broader geopolitical friction. The Vatican did not disclose whether data was compromised, what systems were affected beyond the public website, or any remediation measures taken beyond the initial investigation.
