ELTA had been warned of security risks a year before cyberattack, report shows

A year before the 2022 cyberattack on Hellenic Post (ELTA), which resulted in the data leak of millions of citizens on the dark web, an internal investigation into ELTA's computer systems had warned of a high risk of infiltration.

Among its findings were significant security flaws, the usage of antiquated software, and inadequate employee training. It appeared that the strike was inevitable.

The Personal Data Protection Authority (DPA) fined ELTA 2.9 million euros in February of last year. The Authority estimates state that four to five million people were impacted.

The worst-case scenario came true in March 2022.

The "Vice Society" gang of cyber extortionists struck ELTA, paralyzed part of its network for days and leaked data of millions of citizens on the dark web. On May 4, a few weeks after the attack on ELTA, the hackers posted files they had...