Based on the preliminary assessment, no encrypted or deleted data have been identified, and no service disruptions have been detected as a direct consequence of this incident.

Immediately upon receiving the notification, the Authority initiated all procedures предусмотрed under incident response protocols, establishing a dedicated working group composed of cybersecurity experts. This group promptly began its work in close coordination with the technical staff of Albanian Post, focusing on:

• conducting an in-depth analysis of the incident and verifying any potential compromise;
• identifying indicators of compromise (IOCs);
• analyzing logs and events across critical systems;
• isolating and securing systems to prevent any further impact.

As part of preventive measures and to enable a comprehensive technical analysis, some services were initially temporarily taken offline by Albanian Post, upon the recommendation of the Authority. Currently, all public services are operational.

Meanwhile, certain data suspected to have been exfiltrated have appeared in open sources and are currently being verified for authenticity and origin. At this stage, the volume of potentially exposed data is assessed to be limited.

The National Cyber Security Authority condemns any act that compromises critical information infrastructures and remains committed to ensuring the integrity, confidentiality, and availability of information technology systems in the Republic of Albania.

The Authority will continue to inform the public transparently on further developments and will publish a final report upon completion of the analysis.

For official information, citizens and media are advised to rely exclusively on the official communication channels of the National Cyber Security Authority.

The agreement was formalized during the closing event of the CybHER project, in the presence of H.E. Nick Abbott, Ambassador of the United Kingdom to Albania, and Ms. Majlinda Mazelliu, Director of the British Council for Albania and Kosovo, who emphasized the importance of investing in human capital and fostering long-term partnerships for sector development.

In his remarks, Acting Director General of the National Cyber Security Authority, Saimir Kapllani, described the development of cybersecurity talent as a strategic priority, underscoring that this field represents a fundamental component of national security. He stated that no strategy or technology can be effective without the human capacities that bring these mechanisms to life, emphasizing that investment in skills, knowledge, experience, and talent forms the foundation of a resilient cybersecurity system. In this context, he placed special emphasis on the importance of empowering girls and women in this sector, not only as a matter of equality, but as a genuine enhancement of national capacity and a strengthening of team effectiveness in addressing complex threats.

The Memorandum aims to deepen cooperation in training programs, talent development initiatives, and the creation of linkages between education, public institutions, and the private sector, with a particular focus on creating concrete opportunities for girls and women to build sustainable careers in cybersecurity.

The Marathon was organized into three main categories: the Marathon for Universities and Vocational Schools, the Marathon for Girls and Women, and the Special Marathon for Persons with Disabilities, reflecting a broad and inclusive approach. The format of this initiative generated strong interest, with more than 1,000 applicants, of whom over 500 competitors were selected to actively participate in the competitive phases.

Throughout the implementation period, participants were tested through professional-level technical challenges, implemented and administered via the SimSpace platform, funded by the United States Department of State. The platform provided a realistic and standardized environment for assessing skills. The challenges included analysis, incident management, proactive simulations, and the resolution of highly complex scenarios.

In his address, Igli Tafa, Director General of the National Cybersecurity Authority, emphasized that the National Cybersecurity Marathon represents a unique initiative in terms of organization, scope, and inclusiveness, designed for the first time as a single format bringing together university students, girls and women, as well as persons with disabilities. He underlined that this marathon serves as a concrete mechanism for talent identification and professional capacity building, which are essential for the protection of critical and important information infrastructures in the country, as well as for the secure development of digital services nationwide.

For her part, Mirela Kumbaro, Minister of Education, praised the National Cybersecurity Marathon as an initiative that goes beyond technical competition and should be seen as a starting point for a continuous process of awareness-raising and education. She stressed that cybersecurity cannot remain solely within the circle of professionals, but must be extended as a culture and shared responsibility among children, youth, parents, and educational institutions.

Winners of the National Cybersecurity Marathon 2025

Marathon for Girls and Women
First Place: Ana Kaci
Second Place: Adriana Roci
Third Place: Irva Dafa

Marathon for Students
First Place: Earta Joca
Second Place: Sidrit Zela
Third Place: Orgito Leka
Third Place: Firdeus Dikellari
Third Place: Asim Lecini
Third Place: Emanuel Dervishi
Third Place: Abdurrahman Seitaj
Third Place: Arkel Lahi

Special Marathon for Persons with Disabilities
First Place: Dorina Olldashi
Second Place: Erblin Karaj
Third Place: Alvaro Dunja

Marathon for Universities
First Place: Armed Forces Academy
Second Place: Faculty of Information Technology
Third Place: “New York” University

“Hybrid threat actors are increasing their influence in the Western Balkans, with several specific incidents reported over the last couple of years – and we expect this trend to continue,” says Martha Turnbull, Director of Community of Interest Hybrid Influence at Hybrid CoE.

In recent years Albania and other Western Balkan states have faced several hybrid threat activities such as cyberattacks, while foreign states and non-state actors have grown increasingly influential in the economic, political and cultural domains of society.

Albania joined Hybrid CoE in June 2024.

“Cyber operations, disinformation and digital espionage are no longer isolated phenomena – they are parts of a unified strategy to weaken democratic systems, distort truth and undermine alliances. The objective is simple but dangerous: to erode confidence in institutions, fragment unity among allies and paralyze decision making before a single shot is fired,” says Dr Igli Tafa General Director of the National Cybersecurity Authority of Albania.

This is the second time Hybrid CoE has organised a region-specific hybrid threat conference and simulation exercise focusing entirely on the Western Balkans. The real-world simulation of how to recognize, respond to and defend against various hybrid threats aimed to build the capacities of democratic states and their populations to counter hybrid threat activities conducted by authoritarian regimes.

“We wanted to bring this event to Tirana to give practitioners and experts from Albania, other Western Balkan countries, including representatives of KFOR and EULEX, the other Hybrid CoE Participating States, the European Union, and NATO an opportunity to share knowledge and experiences of and expertise in countering hybrid threats – both within the region and further afield,” says Shiho Rybski, Director of Training & Exercises at Hybrid CoE.

The Western Balkans Hybrid Threat Conference and Simulation Exercise was organized by the European Centre of Excellence for Countering Hybrid Threats (Hybrid CoE) in close cooperation with the National Cyber Security Authority of Albania (NCSA), and with support from Global Affairs Canada (GAC).

In his opening remarks, the Director General of the National Cyber Security Authority (AKSK), Mr. Igli Tafa, emphasized that cybersecurity has become one of the defining challenges of the modern era — a pillar of national sovereignty and collective defence within the Alliance.

“Cybersecurity has become one of the defining challenges of our time. It is not merely a technical concern but a cornerstone of national sovereignty, shared responsibility, and democratic stability,” stated Mr. Tafa.
“In recent years, it has become increasingly clear that cyber defence is no longer an addition to national security — it is its very foundation.”

In a video message, NATO Secretary General Mr. Mark Rutte underscored that cyber defence is a vital component of the Alliance’s collective security, stressing that no country can confront today’s digital-era challenges alone.

“Every day, state and non-state actors operate in cyberspace against us, seeking to undermine our defences, damage critical infrastructure, spy on our societies, and disrupt government services,” said Mr. Rutte.
“No one stands alone in NATO — we stand united in this digital age, facing those who seek to harm us.”

Prime Minister Edi Rama shared Albania’s experience in countering cyberattacks and reaffirmed the government’s commitment to protecting the nation’s digital infrastructure with the most advanced security standards.

“Today, we face a cyberattack every three minutes, yet we successfully repel them all. Albania has built one of the strongest cyber defence walls among NATO countries,” said Prime Minister Rama.

The 2025 NATO Cyber Defence Conference is being held for the first time in Albania under the auspices of the National Cyber Security Authority (AKSK), serving as a strategic platform for sharing expertise among Allies and advancing joint policies in protecting the digital domain.
Throughout its two days, the conference addresses topics including strategic investments, resilience-building, public-private cooperation, and NATO’s role in setting international cybersecurity standards.

The Director General of NCSA, Mr. Igli Tafa, emphasized that the Authority is committed to supporting not only INSTAT, but also all state institutions in dealing with cyber and hybrid attacks aimed at destabilizing the country. He also underlined the readiness of NCSA to provide practical training for INSTAT staff, so that they are prepared for any cyber scenario.

For her part, the Director General of INSTAT, Ms. Elsa Dhuli, thanked NCSA for the support provided in critical moments after the 2024 cyber attack, emphasizing that digital security is an essential condition for the reliability of official statistics and an indispensable standard for the country’s European integration process.