Digital repression tools—spyware, phishing campaigns, account hijacking, and coordinated harassment—have become as dangerous for human rights defenders as physical intimidation. Human rights groups, organizations supporting victims of crimes such as human trafficking, and investigative journalists can be targeted by attacks aimed at extracting information, intimidating an organization, or harming the members and communities they serve (German Marshall Fund).

Romania is no exception, and the discussion regarding digital security within Romanian civil society remains dangerously unaddressed.

The space granted to civil society has shrunk dramatically in Eastern Europe. The proposal or adoption of restrictive legislation has pushed the defense of rights into the background, with attacks on freedom of association being accompanied by the repression of freedom of expression, the closure of independent media, and the persecution of activists (IFEX).

Organizations such as Access Now and Citizen Lab have documented large-scale phishing attacks targeting NGOs in Eastern Europe, independent media, and human rights organizations. One of the most recent, “COLDRIVER” (2024), was linked to a Russian hacker unit, Callisto Group—believed to be under FSB control—which used grant documents and funding proposals to deceive victims (The Insider). Another illustrative case comes from Serbia, where police used spyware against journalists and activists, installed on their mobile phones—demonstrating that digital repression does not only come from the outside but also from within (Amnesty International via AP News, 2024).

Romania is no exception to this regional situation. The safety of journalists remains a serious cause for concern. Surveillance is a significant issue, prosecutorial interference in journalistic activity amounts to harassment, and the judiciary increasingly attempts to force the press to reveal its sources (Reporters Without Borders). The 2023 OECD report on civic space in Romania describes civil society as active but fragile, facing structural limitations in capacity and resources. On the other hand, digital violence and online harassment are not addressed with the same urgency as physical threats, and most EU governments have not taken adequate measures to improve the situation (Liberties.eu).

Over 70% of the more than 200 participants representing 192 organizations at a TechSoup Romania event dedicated to digital security for NGOs stated it was the first event of its kind for them. One in four had already reported a security incident in the last 12 months. The reasons are structural: due to a lack of funds, NGOs prioritize program costs over operational ones, and digital security is treated as an “overhead expense,” which is discouraged by donors. This dynamic is particularly acute for organizations representing minority communities—Roma rights groups, LGBTQ+ organizations, ethnic minority associations—which operate with the smallest budgets but hold sensitive data and are highly politically exposed (German Marshall Fund).

Organizations like RISE Project, the investigative journalism platform that has exposed major cases of corruption and organized crime, depend almost entirely on secure digital infrastructure. A security breach would not be a mere technical inconvenience—it could expose sources to physical danger and destroy years of accumulated evidence. NGOs and think tanks are among the top three sectors most targeted by attacks globally (Microsoft Digital Defense Report, via German Marshall Fund).

At the same time, there is a major gap between Eastern and Western Europe. Organizations in Western capitals can relatively easily access pro bono consultants, EU-funded training programs, and established support networks. In Romania and neighboring countries, especially outside major urban centers, such resources are far fewer. The European ecosystem for digital security education is growing, but it is distributed very unevenly (IntechOpen).

Digital security is not a luxury technical matter. For a journalist protecting a source, for an activist whose communications are monitored, or for an NGO targeted by digital attacks, it represents the difference between safety and danger, between being heard and being silenced.

Without resources, without training, and without dedicated support, Romanian civil society remains vulnerable precisely when it matters most. By supporting digital security, you support human rights.