The global cyber war · statements

Statements

17 statements by the parties, with who said each and to whom. A statement that makes a checkable claim shows the claim’s verdict from the claims ledger.

By party, in alphabetical order. Each party's page lists its own statements, claims and events.

November 2026

Said

10 NovGovernment of France: French Foreign Minister Jean-Noel Barrot said France was weighing measures against Iran over the cyberattacks it blames on the IRGC, some of which might never be made public, Iran International reported; on France Info he said France would push for EU sanctions, Al Jazeera reported with AFP.

Mixed audience · en

Open

10 NovBYOD: The ransomware group BYOD, which took responsibility for the attack on Vanderbilt University in a post on its leak blog, claims to have more than one million Social Security numbers from the attack, CyberScoop reported on 10 November.

Mixed audience · en · the claim and its evidence

Open

9 NovGovernment of France: French Foreign Minister Jean-Noel Barrot said he could confirm the October attack on French supermarket refrigeration was carried out by Iran's Revolutionary Guard Corps, called it the first large-scale cyberattack for sabotage purposes on French soil, and said the Iranian ambassador had been summoned and sanctions would be pursued at European level.

Mixed audience · fr · the claim and its evidence

Open

9 NovGovernment of France: CERT-FR said in its report CERTFR-2026-CTI-009 that it imputes offensive cyber activity targeting France to the units Shahid Shoostari and Shahid Kaveh within the IRGC's electronic and cyber centre.

Mixed audience · fr · the claim and its evidence

Open

9 NovBYOD: The ransomware group BYOD listed Vanderbilt University and claimed to have stolen data from it, The Record reported.

Mixed audience · en · the claim and its evidence

Open

6 NovCloak: The ransomware group Cloak claimed the attack on the Medizinisches Zentrum Gleis D and Medi Porta in Chur and said it took 87 GB of data, Inside IT reported.

Mixed audience · de · the claim and its evidence

Said

5 NovGovernment of Russia: Kremlin spokesman Dmitry Peskov, asked about allegations that Russia was behind the cyberattacks on supermarket refrigeration across Europe, called them absurd statements with no argumentation or proof behind them and an utterly absurd accusation.

Mixed audience · ru

Open

4 NovNoName057(16): The pro-Russian hacktivist persona NoName057(16) claimed on Telegram, together with Z-Pentest, the attacks on European supermarket refrigeration systems, and the groups posted what they said were 2,500 lines of a Danfoss database as proof, Belga reported. The channels were later deleted, the claims could not be confirmed independently, and cybersecurity experts were not convinced of the groups' involvement.

Mixed audience · ru · the claim and its evidence

Said

4 NovZ-Pentest: The hacktivist persona Z-Pentest claimed on Telegram, together with NoName057(16), the attacks on European supermarket refrigeration systems, saying the problem was not malicious hackers but systemic negligence, Belga reported. The claims could not be confirmed independently.

Mixed audience · ru

Said

3 NovGovernment of the United Kingdom: UK NCSC chief executive Richard Horne said the national impact of the refrigeration attacks was minimal but enormous for each business hit, called them the foothills of a wider threat, and said many vulnerabilities are waiting to be exploited.

Domestic audience · en

Said

3 NovGovernment of Romania: Dan Cimpean, director of Romania's National Cyber Security Directorate, said the attack on refrigeration at six Romanian stores seemed semi-amateurish, that officials did not suspect a state actor and that no other infrastructure was compromised.

Domestic audience · ro

Open

1 NovSilent Crow: The hacker groups Silent Crow and Belarusian Cyber-Partisans claimed to have taken 23 TB of data from Rosstat, heise online and Anti-Malware.ru reported.

Mixed audience · ru · the claim and its evidence

October 2026

Said

31 OctGovernment of the United States: President Trump, speaking at Mar-a-Lago on the day of the FBI's alert, said it was not known whether North Korea was behind the Binance theft and that it could still be determined that it was.

Domestic audience · en

Open

31 OctGovernment of the United States: The FBI said North Korea was responsible for the theft of more than $6 billion in virtual assets from Binance on or about 29 October, tied it to the actor it calls TraderTraitor, and asked exchanges to block transactions with 628 addresses it published.

Mixed audience · en · the claim and its evidence

Said

24 OctGovernment of Moldova: Moldovan government spokesperson Dumitru Ciorici said the country had suffered a cyberattack that made some online services unavailable and that the government suspects it is part of hybrid attacks against Moldova.

Domestic audience · ro