Pattern of sophisticated cyber espionage: This marks the second major cybersecurity incident targeting the ICC in recent years. In September 2023, the court disclosed it had suffered what it later characterized as “a targeted and sophisticated attack with the objective of espionage” that was “a serious attempt to undermine the Court’s mandate.”According to reports following the 2023 incident, the court experienced prolonged operational disruptions, demonstrating the long-lasting impact that such sophisticated attacks can have on critical international institutions.The ICC’s cyber troubles reflect broader security challenges facing international institutions. In 2022, Dutch intelligence reported foiling a plot by a Russian spy using a false Brazilian identity to work as an intern at the court, highlighting the multiple vectors through which hostile actors attempt to penetrate international justice institutions. The court has also warned of potential disinformation campaigns designed to undermine its credibility and operations.
ICC takes a proactive approach to cyber-enabled crimes: Even as the ICC faces sophisticated cyberattacks, the institution is developing new capabilities to prosecute cyber-enabled war crimes. In May 2025, the ICC’s Office of the Prosecutor launched a public consultation on its draft policy for addressing cyber-enabled crimes under the Rome Statute, recognizing that “tools used to commit serious international crimes constantly evolve, from bullets and bombs to social media, the internet, and perhaps now even artificial intelligence.”The ICC is already investigating alleged Russian cyberattacks on Ukrainian civilian infrastructure as possible war crimes, marking the first time cyberattacks are being probed by international prosecutors for potential war crimes charges, according to sources familiar with the case. Institutional resilience under pressure: As the ICC continues to face mounting cyber threats while pursuing high-profile international cases, the repeated targeting demonstrates the complex cybersecurity challenges facing international institutions that handle uniquely sensitive information, combining legal evidence, witness protection data, and geopolitical intelligence.The attribution difficulties surrounding both attacks, neither the 2023 nor 2025 incidents have been publicly attributed to specific threat actors, highlight ongoing challenges in cyber attribution even for well-resourced institutions with international support.Despite the cybersecurity challenges, the ICC emphasized its commitment to continuing operations. In its June 30 statement, the court called for “continued support in the face of such challenges” from States Parties, noting that “such support ensures the Court’s capacity to implement its critical mandate of justice and accountability.”
First seen on csoonline.com
Jump to article: www.csoonline.com/article/4016099/second-espionage-linked-cyberattack-hits-icc-exposing-persistent-threats-to-global-justice-systems.html
