Italy Faces Cyberattacks 'Of Russian Origin' Targeting Winter Olympics Infrastructure

Italy's foreign minister Antonio Tajani has revealed that the country is experiencing a wave of cyberattacks "of Russian origin" targeting government offices and Winter Olympics infrastructure ahead of the Milano Cortina Games.

Speaking to reporters on Wednesday, Tajani disclosed that a series of cyberattacks had targeted several government foreign offices, including the one in Washington D.C. He specifically noted that Winter Olympics sites, including hotels in Cortina, had also been targeted.

"We prevented a series of cyberattacks against foreign ministry sites, starting with Washington, and also involving some Winter Olympics sites, including hotels in Cortina," Tajani stated, according to AP reports.

The foreign minister did not specify whether the attacks appeared to be state-backed activity or provide details about the nature of the attacks. However, the timing and targeting align with a long history of Russian interference in international sporting events.

Historical Context of Russian Cyber Operations Against Olympic Games

Russia has a documented pattern of targeting Olympic Games with cyberattacks, particularly following international sanctions against its athletes. The International Olympic Committee banned Russia from competing in the Games in 2017 following a doping scandal involving multiple athletes. The World Anti-Doping Agency subsequently banned Russia from all international sporting events in 2019.

Although the WADA sanction was scheduled to be lifted after the 2022 Beijing Games, Russia's invasion of Ukraine led the IOC to impose an indefinite ban on Russian athletes. Thirteen Russians will compete in Milano Cortina, but they must do so as independents without flying the Russian flag.

Since hosting the 2014 Winter Games in Sochi, which Russia hoped would serve as a political springboard, the UK, US, and others have formally attributed several cyberattacks against subsequent Olympic events to Russia. These operations have included various attacks on the 2018 Winter Games in Pyeongchang and disinformation campaigns surrounding the Paris Games in 2024.

Cloudflare's Controversial Response to Italian Fine

Complicating the cybersecurity landscape for the Milano Cortina Games, Cloudflare CEO Matthew Prince has threatened to withdraw the company's free services from the event following a significant fine imposed by Italian regulators.

The Autorità per le Garanzie nelle Comunicazioni (AGCOM), Italy's telecoms regulator, issued a €14 million ($16.5 million) fine against Cloudflare in January for violating anti-piracy regulations. The fine represents 1 percent of Cloudflare's annual revenue.

In a strongly worded response on social media platform X, Prince threatened multiple retaliatory actions:

• Withdrawal of pro bono security services to Milano Cortina
• Termination of free services to Italian citizens
• Removal of all servers from Italian cities
• Cancellation of planned investment and company office establishment in Italy

This development raises concerns about the cybersecurity posture of the Winter Olympics, as Cloudflare has been providing critical infrastructure protection for the event.

UK Cybersecurity Agency Issues Warning

Tajani's comments follow a warning from the UK's cybersecurity agency about the threat posed by pro-Russia hacktivists. While the warning was issued in the context of attacks on UK critical infrastructure, it underscores the persistent threat that Russia-aligned actors pose to Western institutions and events.

Current Status of Milano Cortina Games

The Milano Cortina Winter Olympics officially begin on February 6, though events have already commenced. The Games opened with a four-fixture curling mixed doubles session on February 4, with Sweden, Great Britain, Canada, and Switzerland securing victories.

The cyberattacks targeting the event infrastructure come at a sensitive time, as Italy works to ensure the security and smooth operation of the Winter Games while managing the ongoing threat from Russian-aligned actors.

The situation highlights the intersection of cybersecurity, international sports, and geopolitical tensions, with the Winter Olympics once again becoming a focal point for state-sponsored or state-aligned cyber operations.