2017 World Events · Annexation, territorial jihadism, and platform influence
NotPetya destructive cyberattack
Malware disguised as ransomware spread from Ukrainian tax software into global networks, causing massive damage.
Evidence-led reading
What is stated, why it matters, and what remains uncertain
What this is
A specific-event record selected from the protected World Events source ledger for cross-year research. It is not an exhaustive account of 2017.
Why it matters
It showed how regional cyber operations can create worldwide collateral damage.
What is established here
The page faithfully exposes the submitted record and its source boundary. No claim-level evidence packet has yet upgraded the record beyond a research starting point.
What remains uncertain
Starting-point source from the submitted dataset; verify exact dates, attribution, legal posture, casualty figures, and current status before reuse.
Record narrative
Source-bounded summary
Malware disguised as ransomware spread from Ukrainian tax software into global networks, causing massive damage.
It showed how regional cyber operations can create worldwide collateral damage.
Structured fields
Record at a glance
- Stable record ID
- 2017-004
- Date or period
- 2017-06-27 onward
- Type
- Cyber sabotage
- Focus
- Cyber / espionage
- Impact scope
- Global
- Priority
- 5 of 5
- Location label
- Kyiv, Ukraine / global
- Coordinate precision
- City-level coordinate
- Actors named by the source record
- Russia attributed; Ukrainian firms; global logistics and manufacturing companies
- Verification state
- source-start-point; sensitive details require independent verification
Geographic context
A coordinate locator, not a surveyed event footprint
The submitted record supplies 50.4501, 30.5234 with the precision label “City-level coordinate.” Multi-location events, disputed borders, campaigns, and broad regions cannot be reduced to one point.
Review location and coordinate boundariesSource and verification boundary
This remains a starting-point record
Starting-point source from the submitted dataset; verify exact dates, attribution, legal posture, casualty figures, and current status before reuse.
Citation and correction
Use the stable record ID and challenge individual propositions
A correction may concern the date, place, actors, attribution, legal status, figures, coordinate precision, source characterization, or why-pivotal summary without invalidating every other field.
2IA — International Intelligence Archive. “NotPetya destructive cyberattack.” World Events record 2017-004. Reviewed July 27, 2026. https://2ix.org/world-events/2017/2017-004/