Russian hackers gained access to internet-connected doorbell cameras to monitor the movement of military equipment being transferred to Ukraine, the Telegraph reported on 10 July 2026, citing the Netherlands' domestic security service and military intelligence service.
The intrusions were part of what the Dutch services called a "large-scale Russian operation" aimed at cameras overlooking military transport routes, intended to establish which weapons were being sent to Kyiv. Allies had previously reported similar Russian hacking of internet-connected cameras near Ukraine's borders, close to military facilities, and at railway stations.
Where the intrusions occurred
The services did not disclose the specific locations affected, saying only that the operation concerned "European NATO member states, including the Netherlands, as well as Ukraine."
Organizations operating IP cameras along the affected routes have been notified. "Organizations that have IP cameras (cameras with internet protocol) on these routes have now been warned so that they can take measures," the services said.
How the hackers found their targets
Many of the cameras lacked adequate protection, according to the services. The devices "often used standard passwords, outdated firmware, and typical settings," the services said. Hackers then used readily available apps to scan for devices that might be accessible, the Telegraph reported.
IP cameras have become widespread in recent years because of inexpensive imports and high-speed internet access. The doorbell-mounted systems are commonly used by owners to monitor property through smartphones, and the intelligence agencies did not specify which type of cameras were compromised in this operation.
Allies had previously reported that Russia was hacking internet-connected cameras near Ukraine's borders, close to military facilities, and at railway stations.
