EU Officials Targeted by State-Sponsored Cyberattacks on Messaging Apps

The EU has officially acknowledged that state-controlled actors are conducting spear-phishing and social engineering campaigns to compromise Signal and WhatsApp accounts of politicians, military personnel, and journalists; more than 190 threat actors have been identified with eight significant incidents reported in H1 2026, and a March 2026 cloud data breach impacting parts of Europa.eu has heightened concerns and prompted calls for unified cybersecurity measures across EU institutions.