Information attacks are the new operational risk for companies in emerging Europe

Anonymous attacks are becoming a major operational risk for companies in emerging Europe. In Ukraine, a Ukrainian IT company called Fractal was recently targeted online. Over 100 stories about its co-founder, Artem Borodatiuk, appeared, reaching nearly three million views. Employees received threatening letters and TV crews visited the office. The attacker's identity remains unknown. Borodatiuk warned that while anonymous media stay unregulated, it is the price of doing business.

Ukrainian journalists found that a single paid post on an anonymous channel can cost around 3,000 US dollars. Fake accounts are also inexpensive. Ukrainian police recently shut down a bot farm in Zhytomyr selling up to 3,000 fake accounts monthly. Speed is crucial, as hackers can break into systems, as seen with supermarket chain ATB, demanding 400,000 US dollars ransom. The attackers set their own questions first, forcing the company to answer them.

The same pattern applies in Poland, Romania, and the Czech Republic, where Telegram is not the primary news source, but it plays a significant role in politics. In 2024, Romania's Constitutional Court canceled the first round of the presidential election based on a TikTok campaign orchestrated by Russia's Doppelganger operation. While attacks on politics are common, they can also target businesses, such as banks, factories, or restaurant chains.

Businesses trading with Ukraine, supporting it, or facing competitors from the region are the next likely targets. Clients rarely react immediately to an attack, often responding days later. During this time, the attackers gain more ground, potentially causing significant damage. To combat this, businesses should avoid arguing with anonymous accounts and focus on identifying who benefits.

They should also prepare responses to expected attacks, monitor online mentions of their company, and promptly inform their real audience through their own channels. A calm, clear statement, supported by facts and documentation, is more effective than a loud denial.

Companies must also ensure their employees receive accurate information directly from the organization, not from friends or social media, as insiders may attempt to sabotage the company. Using screenshots, links, and dates can aid in identifying the attackers, even if locating them proves difficult. Ultimately, investing in a reputation protection plan is essential, as it is not a price of doing business but a normal business risk.