Ukraine war tests public-private cyber defense partnerships

Experts assess Russia's information warfare in Ukraine, highlighting successful private-sector defense coordination but warning that offensive cyber operations have had limited battlefield impact.

One year into Russia's invasion of Ukraine, a panel of experts from the Atlantic Council and partner organizations evaluated the conflict's information environment. While Russia launched extensive cyber and influence operations targeting Ukraine's digital infrastructure and European public opinion, these efforts largely failed to achieve decisive impact. Google alone disrupted over 1,950 Russian information operations in 2022. Ukrainian telecommunications operators, cloud providers, and satellite internet companies proved instrumental in maintaining connectivity and resilience, with private firms playing an unprecedented defensive role.

The panel identified key lessons for Western allies: cyber operations coordinate with kinetic strikes and should be viewed as multi-domain operations rather than standalone battlefield weapons. Russia's influence campaigns proved most effective in the Global South, exploiting anti-Western sentiment that US and allied intelligence communities had underestimated. Experts noted that while hacktivist groups like IT_Army and Killnet emerged as new actors, expectations that cyber operations would serve as decisive precursors to military action were not met, though targeted attacks like AcidRain against Viasat's satellite network demonstrated continued threat.

The conflict's exceptionalism stems from unprecedented documentation via social media, the mobilization of civilian technical workforces, and private companies' willingness to support Ukraine based on clear Russian aggression combined with Russia's comparative economic weakness. Experts cautioned that the strong transatlantic cooperation and private-sector involvement seen in Ukraine's defense may be difficult to replicate in other theaters, and warned against over-estimating the decisive utility of offensive cyber and information operations in kinetic warfare contexts.

Source reporting: https://www.atlanticcouncil.org/content-series/the-5x5/the-5x5-conflict-in-ukraines-information-environment