--- title: "Cyberattack on ARMA: Authorities Blame Foreign Capital, IDS Ukraine Denies Involvement" description: "πŸ”₯ Cyberattack on ARMA on the eve of the IDS Ukraine tender. Authorities blame \"Russian capital,\" the company denies involvement. SBU and NABU are investigating. Experts doubt the transparency of the tender. #ARMA #IDSUkraine #Cybersecurity #Ukraine2026" date: 2026-08-18T09:50:02.000Z lang: en url: https://xab.info/en/posts/cyberattack-on-arma-authorities-blame-foreign-capital-ids-ukraine-denies-involvement tags: [ukraine-war, cybersecurity, arma, ids-ukraine, corruption, economy] publisher: "XAB.info" --- # Cyberattack on ARMA: Authorities Blame Foreign Capital, IDS Ukraine Denies Involvement ![Emblem of the Agency for Restructuring and Asset Management (ARMA) of Ukraine β€” symbol of the state body targeted by a cyberattack](https://xab.info/media/2026/08/18/kiberataka-na-arma-vlasti-obviniaut-inostrannyj-kapital-ids-ukraine-otvergaet-prichastnost/kiberataka-na-arma-vlasti-obviniaut-inostrannyj-kapital-ids-ukraine-otvergaet-prichastnost-1.webp) ## 🎯 Key Points - ARMA suffered a cyberattack on the eve of the tender to select a manager for IDS Ukraine - The agency blames foreign capital for the attack, IDS Ukraine denies involvement - SBU and NABU are investigating the circumstances of the server hack - Experts point to possible internal problems in ARMA's operations - The tender will continue, but under pressure from legal and political factors On August 18, 2026, a large-scale cyberattack on the servers of the National Agency for the Detection, Search, and Management of Assets (ARMA) was reported. The incident occurred at a critical moment β€” on the eve of the deadline for applications for the tender to select an asset manager for the IDS Ukraine group of companies. Acting head of the agency Yaroslava Maksimenko stated that the attack was coordinated and aimed at disrupting the selection procedure, while pointing to the possible involvement of Russian capital in organizing information pressure. ### Official ARMA Position: Disruption of the Tender and External Interference According to Yaroslava Maksimenko, the cyberattack led to a temporary disruption of the Agency's internal registries, however, it will not affect the tender schedule. ARMA emphasizes that the selection procedure for the manager will continue within the legally established deadlines, despite attempts at sabotage. The agency has already transferred case materials to the Security Service of Ukraine (SBU) and the National Anti-Corruption Bureau (NABU) to investigate the circumstances of the hack and facts of illegal access to data. The ARMA statement also notes that such attacks are becoming part of a systematic campaign to destabilize the work of state institutions, especially in the context of managing strategically important assets. The Agency emphasizes that IDS Ukraine is one of the key objects of management, and any attempts to influence the selection process of the manager could have serious consequences for the country's economic security. ### IDS Ukraine Response: Categorical Denial and Call for Transparency In its official statement, the IDS Ukraine group of companies categorically denied any hints of involvement in the cyberattack or attempts to disrupt the tender. The company emphasized that its activities fully comply with Ukrainian legislation, they pay taxes, supply the market with products, and support the economy of Ukraine and the Armed Forces. "Mentions of our brand in the context of hacker attacks or chaotic actions by Agency officials cause only surprise, as such claims lack any logical or factual basis," stated IDS Ukraine. The company called on ARMA to refrain from groundless accusations and insists that any allegations must be based on the official results of investigations by law enforcement agencies. ### Contradictory Data On the one hand, ARMA claims that the cyberattack was part of a coordinated campaign involving foreign capital aimed at disrupting the tender. On the other hand, IDS Ukraine denies its involvement and points to a lack of evidence. At the same time, experts note that ARMA's emphasis on "external interference" may shift attention from internal issues: procedural violations, asset valuation, transparency of the tender, and the legality of property seizure. Furthermore, it was previously reported that the High Anti-Corruption Court (HACC) plans to review ARMA's powers due to a lawsuit by a shareholder of "Morshynska" (part of IDS Ukraine), which could lead to the cancellation of the Agency's management of the entire asset. This creates a context in which statements about the cyberattack may be perceived as an attempt to distract attention from the legal risks for the Agency itself. ### Expert Assessment: Questions Regarding Procedure and Transparency Specialized lawyers and economic experts express doubts about the validity of ARMA's statements. They point to the need for a thorough check not only of the facts of the cyberattack but also of the legality of the Agency's actions within the framework of the tender. In particular, questions arise regarding: asset valuation criteria, the procedure for selecting a manager, the existence of a conflict of interest, and compliance with procedural norms. As specialists note, in the absence of public data on the results of the SBU and NABU investigations, any conclusions about the involvement of the parties remain speculative. The final assessment of the legitimacy of ARMA's actions and the circumstances of the cyberattack should be provided by competent authorities after the completion of the investigation. ### Outlook: The Tender Will Continue, but Under Pressure Despite the cyberattack, ARMA confirms that the tender to select a manager for IDS Ukraine will take place within the established deadlines. However, experts warn that political and legal pressure may complicate the process. In the event that the HACC declares ARMA's powers invalid, this could lead to a review of the entire asset management procedure. At the same time, IDS Ukraine states its readiness to cooperate with regulatory bodies and hopes that after another audit, all groundless accusations will be finally rejected. The company emphasizes that its priority is business stability and contribution to the economy of Ukraine, not participation in political intrigues. ## πŸ” Fact-Check Verification - [Heads of IDS Ukraine and ARMA held a working meeting: what was discussed](https://www.unian.net/economics/other/rukovoditeli-ids-ukraine-i-arma-proveli-rabochuyu-vstrechu-chto-obsudili-13359648.html) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π°Π΅Ρ‚ Ρ„Π°ΠΊΡ‚ взаимодСйствия ΠΌΠ΅ΠΆΠ΄Ρƒ сторонами ΠΈ контСкст конкурса. - [ARMA is preparing the fourth tender for IDS Ukraine: the company reminded about the conditions for preserving the asset](https://ukranews.com/news/1160918-arma-gotovit-chetvertyj-konkurs-dlya-ids-ukraine-v-kompanii-napomnili-ob-usloviyah-sohraneniya) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π°Π΅Ρ‚ ΠΏΠΎΠ΄Π³ΠΎΡ‚ΠΎΠ²ΠΊΡƒ конкурса ΠΈ ΠΏΠΎΠ·ΠΈΡ†ΠΈΡŽ IDS Ukraine. - [IDS Ukraine published its position on asset valuation and interaction with ARMA](https://www.obozrevatel.com/ekonomika-glavnaya/ids-ukraine-obnarodovala-pozitsiyu-po-otsenke-aktivov-i-vzaimodejstviyu-s-arma.htm) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π°Π΅Ρ‚ ΠΎΡ„ΠΈΡ†ΠΈΠ°Π»ΡŒΠ½ΡƒΡŽ ΠΏΠΎΠ·ΠΈΡ†ΠΈΡŽ ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΈ ΠΏΠΎ вопросам ΠΏΡ€ΠΎΠ²Π΅Ρ€ΠΊΠΈ ΠΈ сотрудничСства. ## ❓ FAQ ### Q: What happened to ARMA's servers? **A:** ARMA's servers were subjected to a cyberattack on the eve of the deadline for applications for the tender to select a manager for IDS Ukraine. As a result, access to internal registries was disrupted. ### Q: Who, according to ARMA, is behind the attack? **A:** ARMA links the attack to possible attempts to disrupt the tender and points to the involvement of Russian capital in information pressure. ### Q: How did IDS Ukraine react? **A:** The company categorically denied involvement in the attack and called on ARMA to refrain from groundless accusations, insisting on transparency and legality. ### Q: Will the tender continue? **A:** Yes, ARMA confirmed that the tender will take place within the legally established deadlines, despite the cyberattack. ### Q: Are there contradictions in the statements of the parties? **A:** Yes, ARMA accuses external interference, while IDS Ukraine denies involvement and points to a lack of evidence. Experts also doubt the transparency of the procedure.