In a striking display of low-tech resilience, Romanian government systems weathered what has been described as the largest coordinated cyber-attack in the country's history, reverting to pen and paper operations as digital defences crumbled. British cybersecurity experts have praised the response as a masterclass in contingency planning, even as the attack exposed vulnerabilities in the digital infrastructure of an EU state.
The assault, which began on Tuesday morning, targeted key government databases, tax collection systems, and healthcare registries. Hackers unleashed a complex wave of ransomware and distributed denial of service (DDoS) attacks, knocking critical systems offline for more than 12 hours. Officials in Bucharest confirmed that no ransom was paid, and no data was permanently lost, but the incident forced civil servants to fall back on physical records and handwritten receipts.
For the thousands of pensioners queuing at post offices to collect their monthly payments, the disruption was felt acutely. Maria Popescu, 74, from a suburb of Bucharest, said she had waited three hours. “They said the computers were broken. They wrote down my name on a piece of paper and told me to come back tomorrow. This is not the first time. But at least they are honest.” Her patience reflects a nation that has learnt to adapt to chaos, but also raises questions about why digital infrastructure remains so brittle.
British experts were quick to praise the Romanian response. Professor James Hartley, a cybersecurity fellow at the Royal United Services Institute, said: “To fall back on pen and paper without a catastrophic loss of service is remarkable. Many wealthier nations would have ground to a halt. The Romanians showed that human redundancy is just as important as digital redundancy.” He cautioned, however, that reliance on analogue systems is not a sustainable solution. “This is a wake-up call. The attack was sophisticated. It could have been far worse.”
The Romanian government has not named the perpetrators, but preliminary forensic analysis suggests the attack originated from a state-sponsored group, likely from Russia, in retaliation for Romania's support of Ukraine. The National Cyber Security Directorate in Bucharest said it is working with NATO and EU partners to trace the source.
For the working people of Romania, the incident is another reminder of the fragility of modern life. In the industrial city of Brașov, factory workers were sent home after payroll systems failed. “I have bills to pay,” said Ion Dumitrescu, a 52-year-old machinist. “I trust the paper in my hand more than a screen, but screens are faster. We should not have to choose.”
The attack has reignited debate across the European Union about cyber resilience, particularly in poorer member states. Romania spends far less on cybersecurity as a share of GDP than the EU average. “This is a cost-of-living crisis playing out in the digital realm,” said Dr. Elena Vasilescu, an economist at the University of Bucharest. “When the state cannot afford robust defences, it is the poorest who suffer most. They cannot afford to wait.”
Yet the response also offered a lesson in frugal resilience. Several government agencies kept handwritten logs of all transactions, later digitised when systems came back online. The tax authority published updates on paper notices pasted to office doors. For a few hours, Romania looked like a country from the 1980s. And it worked.
British experts noted that the UK’s own National Health Service, hit by a major ransomware attack in 2017, still struggles with digital preparedness. “We can learn from Romania,” said Hartley. “Their civil servants did not panic. They had a plan B. That is not old-fashioned. That is smart.”
The attack is still being contained. Some services remain offline tonight. But the Romanians have shown that when screens go black, a pencil can be a weapon of defence. For the woman at the pension counter, that was enough. For the factory worker in Brașov, it was a hard lesson that the economy does not run on goodwill alone.
