Back Cybersecuritynews

FancyBear Server Exposure Reveals Stolen Credentials, 2FA Secrets and NATO

Cybersecuritynews •Tushar Subhra Dutta • March 18, 2026

A serious operational security failure by Russian state-linked hacking group FancyBear has given security researchers an unusually clear view into an active espionage campaign targeting government and military organizations across Europe. On March 11, 2026, threat intelligence firm Hunt.io published findings on a campaign it tracks as Operation Roundish, based on an exposed open-directory first […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FancyBear Server Leak Exposes NATO Targets and Stolen Credentials On March 11, 2026, a significant operational security failure by the Russian state-linked hacking group FancyBear led to the exposure of a server containing stolen credentials, two-factor authentication (2FA) secrets, and insights into espionage activities targeting European government and military organizations. This incident, tracked as Operation Roundish by Hunt.io, reveals the scale of compromises and the careless handling of sensitive information by the group. The exposed infrastructure includes details on NATO targets, indicating a broad scope of impact across multiple nations. Security researchers have expressed concern over the implications of this leak for ongoing cybersecurity efforts in Europe. The incident highlights vulnerabilities in the operational security of state-sponsored hacking groups. Current status remains active as researchers analyze the leaked data for further insights. 2 sources 75

Extracted Entities

FancyBear Server Exposure Reveals Stolen Credentials, 2FA Secrets and NATO

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Campaigns (1)

Domains (1)

Industries (1)