APT28 Outlook cyber campaign

Czechia, alongside Germany, the EU, NATO, and partners, issued an official statement on long-running APT28 cyber espionage activity. The statement links APT28 to Russian military intelligence and records Czech institutional targeting.

Cyber attribution is often compressed into broad political claims. The official statement supports attribution and targeting; data loss, effect, and legal claims need separate records.

• The Czech MFA source records an official condemnation and attribution statement for APT28.
• The statement says some Czech institutions were targeted through a Microsoft Outlook vulnerability.
• The source frames the activity as serious in the context of elections, democratic processes, and Russia's war against Ukraine.

• The record does not identify every affected Czech institution.
• Technical indicators, remediation details, and incident impact require specialized source records.
• Public claims about election impact or data theft need separate evidence.