Maia Sandu
Credit: President of Moldova Maia Sandu / X

‘Unprecedented' interference targets Moldova's elections

Moldova’s parliamentary email servers were hit by a cyberattack last week, just ahead of the country’s presidential election and a referendum on joining the European Union.

In a statement to local media, the parliament’s spokesperson said some of the agency’s information was compromised by an unidentified threat actor last Thursday but provided no further details.

Local cybersecurity specialists are currently investigating the scope and impact of the incident, the spokesperson added, while parliament monitors for any potentially false information that could surface online in the event the stolen data is manipulated.

The parliament said it frequently faces cyber incidents, but their number has increased significantly in the run-up to the election. The latest attack wasn’t attributed to a specific threat actor, but the most likely suspect is Russia, which has been accused of waging a hybrid war against Moldova, where it controls the breakaway region of Transnistria.

On Sunday, Moldovans headed to polling stations. According to preliminary results, incumbent president Maia Sandu took 42% of the vote, while her main rival, former prosecutor-general Alexandr Stoianoglo, won 26%. They will compete in a second round of voting in November.

In a referendum initiated by the pro-European Sandu, only a slim majority — 50.39% of Moldovans — voted for future EU accession — a smaller share than expected. Sandu blamed this on "unprecedented" outside interference. 

In a statement on Monday, she claimed there was "clear evidence" that criminal groups, working with "foreign forces hostile to Moldova’s national interests," had sought to buy off 300,000 votes.

"Criminal groups…have attacked our country with tens of millions of euros, lies, and propaganda, using the most disgraceful means to keep our citizens and our nation trapped in uncertainty and instability," she said.

Moldova's national intelligence agency previously warned of Russia’s plans to launch hybrid attacks against the country ahead of its elections with the goal to compromise the EU referendum and “vilify and discredit” the pro-European candidates.

According to Moldova’s cyber officials, part of Russia’s strategy involves the “extensive use of social networks,” such as Telegram and TikTok, to promote pro-Moscow politicians, encourage anti-government protests, and incite inter-ethnic hatred.

In a statement on Friday, German Foreign Minister Annalena Baerbock said that Russia is “using hybrid means” to meddle in elections in Europe. This includes targeted interference, cyberattacks and disinformation spread by armies of bots on social media. 

“Moldova is defying these threats,” Baerbock added.

In response to election interference allegations from both Moldova and the EU, Russian President Vladimir Putin’s press secretary, Dmitry Peskov, said on Monday that they should provide evidence of meddling before making such “serious” accusations. He also doubted the fairness of Moldova’s elections, adding that the preliminary results “raise many questions.”

Tensions between Moldova and Russia have been escalating since the start of the war in Ukraine. As Moldova moves toward the EU and aligns with Europe’s sanctions against Russia, the Kremlin has sought to reassert influence over the former Soviet republic.

The weekend’s election and referendum results in Moldova will prepare the ground for next year’s parliamentary elections and will decide if the country is ready to make joining the EU by 2030 part of its national strategy.

Get more insights with the
Recorded Future
Intelligence Cloud.
Learn more.
No previous article
No new articles
Daryna Antoniuk

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.