Skip to content

Ukraine CEC Cyberattack, 2014

CyberBerkut election attack · Yarosh result forgery

A coordinated cyber operation disrupted Ukraine's Central Election Commission systems before the May 2014 presidential election and prepared a false display showing Dmytro Yarosh as the winner. The false figures were broadcast by Russian Channel One, but the attack did not alter the paper count or the certified result.

The operation deleted files, disabled core network nodes and interrupted the public results display. Responders found APT28-associated espionage malware alongside the destructive activity, while the pro-Russian CyberBerkut group claimed parts of the campaign. Those indicators support a Russia-linked assessment, but the sources in this record do not provide a formal judicial finding of Russian state command. The legal result remained recoverable because precinct ballots were counted by hand and paper protocols were physically aggregated.

Elections

People

Actors

Evidence Library

ResearchNATO Cooperative Cyber Defence Centre of Excellence (CCDCOE)2015
Revolution Hacking — Nikolay Koval, in Cyber War in Perspective: Russian Aggression against Ukraine
OriginalArchive pending
Observer reportOSCE Office for Democratic Institutions and Human Rights (ODIHR)June 30, 2014
Ukraine, Early Presidential Election, 25 May 2014 — ODIHR final report
OriginalArchive pending
JournalismRadio Free Europe / Radio LibertyMay 26, 2014
Russian TV announces Right Sector leader Yarosh led Ukraine polls
OriginalArchive pending

Share links open the network’s own composer. Nothing is embedded here, so no third party learns which pages you read.