27 Accounts At Hellenic National Defense General StaffCompromised in Major Cyber Espionage Campaign.
n a troubling development for Greek national security, Russia-linked hackers have successfully breached 27 email accounts belonging to Greece’s highest military authority — the Hellenic National Defense General Staff (HNDGS).
The cyber intrusion, revealed on April 15, 2026, forms part of a wider espionage operation targeting military and government institutions across Europe, with a heavy focus on Ukraine and several NATO-aligned Balkan nations. According to data reviewed by Reuters, the compromised inboxes include those managed directly by the headquarters in Athens.
Notably affected were the email accounts of Greek defense attachés stationed in India and Bosnia and Herzegovina, as well as the public-facing inbox of Greece’s Joint Armed Forces Mental Health Center.
Sophisticated Russian-Linked Cyber Operation Exposed
Cybersecurity researchers attribute the campaign to a well-known Russian military hacking group, often referred to as Fancy Bear or APT28, which has long been linked to Russian intelligence services.The breach came to light after the hackers themselves made a significant operational error, accidentally exposing a trove of data that allowed independent researchers to uncover the scale of the intrusion.
The operation reportedly ran from at least September 2024 through March 2026 and compromised hundreds of email accounts overall — with over 170 in Ukraine alone targeting prosecutors and investigators. In addition to Greece, the campaign hit:
- At least 67 accounts in Romania’s Air Force, including some connected to NATO airbases.
- Government and local official accounts in Bulgaria (particularly in Plovdiv province).
- Targets in Serbia.
This pattern suggests a coordinated effort to gather intelligence on NATO activities, regional military cooperation, and investigations into Russian influence operations.
Implications for Greece and NATOGreece, as a key NATO member with strategic importance in the Eastern Mediterranean, maintains close military ties with the Alliance. The breach of the Hellenic National Defense General Staff — responsible for overseeing Greece’s armed forces, defense policy, and international military cooperation — raises serious concerns about potential exposure of sensitive communications.While there is no public confirmation of what specific data may have been stolen, the targeting of defense attachés abroad points to possible interest in diplomatic and intelligence-sharing channels.
The inclusion of a mental health center inbox, though public-facing, adds to the breadth of the compromise.Greek authorities have not yet issued a detailed public statement on the incident. The HNDGS did not respond to detailed questions from Reuters regarding the breach.
This event highlights the growing threat of state-sponsored cyber espionage against Greece and its allies. Russia has increasingly turned to hybrid warfare tactics — combining cyberattacks, disinformation, and sabotage — to undermine NATO cohesion amid the ongoing war in Ukraine.
Broader Context of Russian Cyber Activity in Europe
The Greece military email hack is not an isolated incident. Similar operations have targeted critical infrastructure, government ministries, and defense entities across the continent. Experts warn that such campaigns aim to collect intelligence, monitor investigations into Russian activities, and potentially prepare for future disruptive actions.
For the Greek diaspora and those following Hellenic affairs, this story underscores the complex security challenges facing modern Greece: balancing traditional geopolitical tensions (including with Turkey) while defending against sophisticated digital threats from major powers.
As cyber defenses become as critical as conventional military strength, incidents like this may prompt stronger calls for enhanced NATO-wide cybersecurity cooperation and investment in Greece’s own digital resilience.
GlobalGreeks.com will continue monitoring developments in this story, including any official responses from Athens or NATO, potential impacts on Greek defense operations, and how this fits into the wider pattern of hybrid threats in the region.