MediumII Cyber Warfare & Critical Infrastructure16 October 2026, Friday

Azerbaijan's parliament blames hybrid attacks on forces in friendly and neighbouring countries

On 16 October Azerbaijan's parliament said hybrid attacks launched from the territory of friendly and neighbouring countries had intensified. The statement came 3 days after a cyber attack that targeted more than 100 state domains.

Location: BAKU

Speaking to APA, the State Service for Special Communication and Information Security said the attacks began at around 22:00 Baku time on 13 October and targeted more than 100 state domains. The service attributed the attack to an unnamed foreign hacker group and did not disclose the method. According to JAMnews, local media reported that the websites of the Cabinet of Ministers, the interior, emergency situations and health ministries, and the State Examination Centre were affected. The sites were restored, and no finding of a data leak has been published.

There are two claims about the perpetrator. According to OC Media, a pro-Iranian hacker group claimed the attack, citing the headscarf restrictions in schools. JAMnews wrote that Meydan TV relayed a theory linking the attack to Türkiye, but that no evidence supports that link. Parliament's 16 October statement named no country either; neither attribution could be verified.

The attack landed in the middle of a cooling between Ankara and Baku. According to JAMnews, students and teachers wearing headscarves were removed from classes during school inspections on 9–12 October, and 37 people were detained in protests. According to OC Media, chief presidential adviser Oktay Saral called the ban unacceptable on 13 October. Fidan met Aliyev at the CICA summit in Baku on 14–15 October. The Organisation of Turkic States summit expected in Türkiye at the end of October will be the first test of where the relationship is heading.

Talay assessment

Bottom line

Baku is placing the attack on more than 100 domains, together with the headscarf dispute, inside a picture of hybrid pressure, using language that covers Ankara without naming any country. The only concrete claim of responsibility comes from a pro-Iranian group; the Türkiye link is unproven. The most likely path is that the tension stays rhetorical and eases at the Organisation of Turkic States summit at the end of October.

Likely effects

Türkiye–AzerbaijanNegativeWeeks
Parliament's reference to friendly and neighbouring countries opens a field of accusation that could include Ankara; the alliance's institutional channels are under strain.
Critical digital infrastructureNegative1–6 months
Disruption to the sites of the Cabinet of Ministers and 4 ministries shows that state services are exposed to a single wave of attacks.
Energy corridorUncertain1–6 months
The Baku–Tbilisi–Ceyhan pipeline remains a shared interest of both countries; the political cooling has not yet affected flows.

Possibilities, ranked

1
Tension stays rhetorical60%
Both sides limit their statements, the Organisation of Turkic States summit goes ahead and relations return to normal.
Watch: Aliyev's attendance at the Organisation of Turkic States summit at the end of October
2
Cooling persists30%
The headscarf dispute and exchanges of statements continue, and high-level contacts are postponed.
Watch: New exchanges of statements between YAP and the AKP
3
Attack pinned on a country10%
Baku formally attributes the attack to a group operating from a specific country and takes diplomatic action.
Watch: The State Service's technical report on the source of the attack

Probabilities are calibrated judgement based on the sources, not measurement, and are revised as new information arrives. Not investment advice.

Market reaction

Indicators affected

State domains targeted▼ 100+
Detentions▼ 37

Bottom line

Likely effects

Possibilities, ranked

Sources