From Ransomware and Leaks to Intelligence: Persistent Intelligence Exposure in the Russo‑Ukrainian War

Krasznay, Csaba (2026) From Ransomware and Leaks to Intelligence: Persistent Intelligence Exposure in the Russo‑Ukrainian War. AARMS (Academic and applied research in public management science). ISSN 2064-0021 (In Press)

Preview

Text persistent_intelligence_exposure_krasznay.pdf Download (284kB) | Preview

Abstract

Cyber incidents involving data exfiltration may generate consequences that persist long after compromised systems have been restored and the immediate technical effects of an intrusion have been mitigated. This study introduces the concept of Persistent Intelligence Exposure (PIE) to describe situations in which information disclosed through ransomware, hack-and-leak operations, or other cyber incidents retains or acquires intelligence value through subsequent aggregation and correlation with other sources. Using the Russo-Ukrainian War as an empirical context, the study applies a qualitative-comparative, OSINT-based methodology to a pilot sample of twelve publicly documented incidents. The proposed framework assesses exposure across five dimensions—Human, Organisational, Relational, Technical, and Strategic—and evaluates the persistence and mosaic potential of compromised information. The findings show particularly strong Organisational, Relational, and Strategic exposure, while nine of the twelve cases demonstrate very high mosaic potential. The analysis further indicates that persistent intelligence value can emerge independently of the original attacker’s motivation, as information initially obtained for financial, political, or disruptive purposes may subsequently become exploitable by other actors. The findings suggest that post-incident risk assessment, particularly in defence, critical infrastructure, and other national-security-sensitive environments, should extend beyond technical remediation to consider what durable knowledge an adversary may derive from exposed information and its correlation with other sources.

Actions (login required)

View Item