Cyberattack on ARMA: Authorities Blame Foreign Capital, IDS Ukraine Denies Involvement

On August 18, 2026, a large-scale cyberattack on the servers of the National Agency for the Detection, Search, and Management of Assets (ARMA) was reported. The incident occurred at a critical moment — on the eve of the deadline for applications for the tender to select an asset manager for the IDS Ukraine group of companies. Acting head of the agency Yaroslava Maksimenko stated that the attack was coordinated and aimed at disrupting the selection procedure, while pointing to the possible involvement of Russian capital in organizing information pressure.

Official ARMA Position: Disruption of the Tender and External Interference

According to Yaroslava Maksimenko, the cyberattack led to a temporary disruption of the Agency's internal registries, however, it will not affect the tender schedule. ARMA emphasizes that the selection procedure for the manager will continue within the legally established deadlines, despite attempts at sabotage. The agency has already transferred case materials to the Security Service of Ukraine (SBU) and the National Anti-Corruption Bureau (NABU) to investigate the circumstances of the hack and facts of illegal access to data.

The ARMA statement also notes that such attacks are becoming part of a systematic campaign to destabilize the work of state institutions, especially in the context of managing strategically important assets. The Agency emphasizes that IDS Ukraine is one of the key objects of management, and any attempts to influence the selection process of the manager could have serious consequences for the country's economic security.

IDS Ukraine Response: Categorical Denial and Call for Transparency

In its official statement, the IDS Ukraine group of companies categorically denied any hints of involvement in the cyberattack or attempts to disrupt the tender. The company emphasized that its activities fully comply with Ukrainian legislation, they pay taxes, supply the market with products, and support the economy of Ukraine and the Armed Forces.

"Mentions of our brand in the context of hacker attacks or chaotic actions by Agency officials cause only surprise, as such claims lack any logical or factual basis," stated IDS Ukraine. The company called on ARMA to refrain from groundless accusations and insists that any allegations must be based on the official results of investigations by law enforcement agencies.

Contradictory Data

On the one hand, ARMA claims that the cyberattack was part of a coordinated campaign involving foreign capital aimed at disrupting the tender. On the other hand, IDS Ukraine denies its involvement and points to a lack of evidence. At the same time, experts note that ARMA's emphasis on "external interference" may shift attention from internal issues: procedural violations, asset valuation, transparency of the tender, and the legality of property seizure.

Furthermore, it was previously reported that the High Anti-Corruption Court (HACC) plans to review ARMA's powers due to a lawsuit by a shareholder of "Morshynska" (part of IDS Ukraine), which could lead to the cancellation of the Agency's management of the entire asset. This creates a context in which statements about the cyberattack may be perceived as an attempt to distract attention from the legal risks for the Agency itself.

Expert Assessment: Questions Regarding Procedure and Transparency

Specialized lawyers and economic experts express doubts about the validity of ARMA's statements. They point to the need for a thorough check not only of the facts of the cyberattack but also of the legality of the Agency's actions within the framework of the tender. In particular, questions arise regarding: asset valuation criteria, the procedure for selecting a manager, the existence of a conflict of interest, and compliance with procedural norms.

As specialists note, in the absence of public data on the results of the SBU and NABU investigations, any conclusions about the involvement of the parties remain speculative. The final assessment of the legitimacy of ARMA's actions and the circumstances of the cyberattack should be provided by competent authorities after the completion of the investigation.

Outlook: The Tender Will Continue, but Under Pressure

Despite the cyberattack, ARMA confirms that the tender to select a manager for IDS Ukraine will take place within the established deadlines. However, experts warn that political and legal pressure may complicate the process. In the event that the HACC declares ARMA's powers invalid, this could lead to a review of the entire asset management procedure.

At the same time, IDS Ukraine states its readiness to cooperate with regulatory bodies and hopes that after another audit, all groundless accusations will be finally rejected. The company emphasizes that its priority is business stability and contribution to the economy of Ukraine, not participation in political intrigues.