Other MoA event in Hungary on Mon 3rd August 2026

Hungary’s State Treasury has confirmed that part of its IT infrastructure was hit by a cyberattack, with preliminary findings indicating that the attack originated from Russian servers.

According to the Treasury, the incident targeted the IT network of its Agriculture and Rural Development Division, which operates as Hungary’s National Paying Agency responsible for administering agricultural and rural development funds.

Infected servers isolated immediately

The Treasury told Telex that its IT specialists acted as soon as the attack was detected, disconnecting the affected servers from the network to prevent further damage.

Officials stressed that no customer data has been compromised and that there is currently no evidence of data loss.

However, the attack did affect some internal systems. Files stored on the computers of certain employees became encrypted, suggesting that the attackers deployed ransomware or similar malicious software.

Investigation under way

The incident is being investigated with the assistance of experts from Hungary’s National Cyber Security Centre, who are working alongside Treasury specialists to contain the attack and restore secure operations as quickly as possible.

The Treasury has also notified Hungary’s National Authority for Data Protection and Freedom of Information (NAIH), as required under applicable regulations.

According to Hungarian media reports, the case is also being examined by the National Bureau of Investigation and the Special Service for National Security.

Some online services temporarily unavailable

While the investigation continues, certain electronic services used by the Agriculture and Rural Development Division will remain available only on a limited basis for security reasons.

The Treasury apologised for any inconvenience caused by temporary service disruptions and asked users for their patience while recovery efforts continue.

Although experts currently believe the attack originated from Russian servers, authorities have not publicly identified the individuals or group responsible, and the investigation remains ongoing.