Lukáš Kintr, director of the National Cyber and Information Security Agency, noted that this attack exemplifies a recurring pattern of behavior by the hacking group APT31.

APT31, also known as Judgment Panda, is linked to the Chinese government and has been implicated in various cyberattacks against democratic institutions in the U.S. and UK.

The U.S. State Department is offering rewards of up to $10 million for information leading to the arrest of APT31 members or their associates.

The cyber intrusion, confirmed on May 28, 2025, primarily targeted unclassified networks and is considered one of the most serious cyber incidents in Czech history.

Czech authorities reported that while no classified information was accessed, the hackers aimed to gather intelligence on the EU's agenda regarding Asia.

The European Union and NATO have condemned a recent cyberattack attributed to Chinese-linked hackers against the Czech Republic's Foreign Ministry.

In response, Czech Foreign Minister Jan Lipavsky summoned the Chinese ambassador to express that such cyber activities damage bilateral relations and announced heightened security measures at the Ministry.

Known for its sophisticated hacking techniques, APT31 has been involved in extensive cyber espionage operations targeting government and defense sectors.

The group has previously targeted organizations in the Czech Republic, as well as U.S. and UK government entities, including the Capitol Hill and the British Electoral Commission.

The cyberattack comes amid growing defense cooperation between the Czech Republic and Taiwan, which has strained relations with China.

NATO has reiterated the importance of improving capabilities to counter cyber threats, emphasizing that cyberspace is a contested area.

The Czech Republic's experience with cyber threats is not isolated, as the BIS has warned of an intensified Chinese threat in the context of global geopolitical tensions.