Cyber Incident Victim: Ukrainian alleged pro-Russian Journalists
Date:
Sep 2016
Location:
Ukraine
Summary
Pro-Ukraine hackers leaked personal information of journalists accused of pro-Russian sympathies, targeting those with press accreditation in conflict zones held by Russian-backed forces. The group released data on both Ukrainian and foreign reporters from over 30 international media organizations, falsely equating professional access to separatist regions with political alignment. Ukrainian authorities reportedly responded with tacit approval or silence, potentially aiming to discourage frontline reporting. The exposure of sensitive details created financial risks while placing journalists in immediate physical danger within the war-torn environment, with multiple recipients subsequently facing death threats via communications platforms. This marked the second such breach within four months.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On September 3, 2016, the Ukrainian hacker group Myrotvorets leaked personal details of journalists they accused of pro-Russian sympathies, marking their second such action within four months. The prior leak in August 2016 had targeted journalists who obtained press accreditation to report from Russian-controlled areas of eastern Ukraine. The September release exposed Ukrainian and foreign journalists affiliated with over 30 international media organizations, including CNN, Al Jazeera, Radio Free Europe, The Daily Beast, BBC, and the Associated Press. Myrotvorets justified the leaks by asserting that journalists securing accreditation in pro-Russian territories inherently endorsed Russian interests. This rationale disregarded the established practice of journalists operating in conflict zones to provide objective coverage, irrespective of personal political leanings. The group’s actions reflected a deliberate effort to conflate professional reporting activities with ideological alignment.
Ukrainian authorities responded to the leak with silence and implicit endorsement, signaling no intent to investigate or sanction the hackers. Observers interpreted this inaction as a tacit strategy to discourage journalists from operating in Ukraine, particularly near frontlines where sensitive military activities occurred. The exposure of personally identifiable information (PPI) created immediate risks beyond typical financial hazards, given Ukraine’s active conflict environment and heightened nationalist sentiment. Multiple journalists named in both the August and September leaks reported receiving death threats through phone calls and social media platforms. The leaks amplified physical safety concerns for media personnel, compounding existing dangers inherent to warzone reporting. No public evidence indicated governmental or law enforcement intervention to protect affected individuals or mitigate threats following either disclosure.