Lyce · Hybrid Watch

hw_c70976c987de5b12

The Vatican’s main website and multiple Curial web-pages suffer abnormal access and go offline.

The Vatican press office reported “abnormal access attempts” causing its official website and various affiliated portals to be down for hours. According to media reports the outage occurred just days after the Pope’s strong public criticism of Russia’s invasion of Ukraine, leading the Ukrainian ambassador to the Holy See to publicly attribute the incident to Russian-linked hackers. The dynamics illustrate how an adversary may use digital disruption of religious-state or diplomatic institutions to impose cost and signal displeasure; in this case the timing suggests the attack was a form of retaliation for the Vatican’s stance on Ukraine. Although there was no reported physical damage or loss of life, the targeting of the Holy See’s web-systems (including diplomatic and ecclesiastical communication channels) places the event firmly within the hybrid-warfare domain of disruption. The incident also underscores that even micro-states or religious-sovereign entities like Vatican City are subject to hybrid-threat operations linked to major geopolitical conflicts. The fact that attribution remains unconfirmed in official Vatican statements, yet strongly associated with Russian-linked sources, aligns with the classic “deniable” nature of hybrid warfare.

Occurrence
2022-12-01
Publication
2022-11-30T23:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
VA
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2022-11-30T23:00:00Z

    The Vatican press office reported “abnormal access attempts” causing its official website and various affiliated portals to be down for hours. According to media reports the outage occurred just days after the Pope’s strong public criticism of Russia’s invasion of Ukraine, leading the Ukrainian ambassador to the Holy See to publicly attribute the incident to Russian-linked hackers. The dynamics illustrate how an adversary may use digital disruption of religious-state or diplomatic institutions to impose cost and signal displeasure; in this case the timing suggests the attack was a form of retaliation for the Vatican’s stance on Ukraine. Although there was no reported physical damage or loss of life, the targeting of the Holy See’s web-systems (including diplomatic and ecclesiastical communication channels) places the event firmly within the hybrid-warfare domain of disruption. The incident also underscores that even micro-states or religious-sovereign entities like Vatican City are subject to hybrid-threat operations linked to major geopolitical conflicts. The fact that attribution remains unconfirmed in official Vatican statements, yet strongly associated with Russian-linked sources, aligns with the classic “deniable” nature of hybrid warfare.