They Fled Ukraine to Keep Their Cyber Startup Alive. Now, They’re Hacking Back.
Dozens of employees at Ukrainian cybersecurity startup Hacken fled their war-torn country and found refuge about 2,000 miles away in Portugal. Since then, they have managed to keep their business alive and are now supporting cyber operations against Russia.
The company has moved its main office from Kyiv to Lisbon, with stops in between, mirroring the drastic measures taken by millions of Ukrainians as they sought to escape danger and preserve their livelihoods while the Kremlin wreaked its havoc. For Hacken Chief Executive Dmytro Budorin, keeping his business alive in the fast-growing market for cryptosecurity meant urging his workers to flee before the bombs began to fall.
“How will I feel, how will I look into the eyes of my employees, if we had the opportunity, had the money, understood that something can go wrong, and we didn’t do at least something to try to get everybody out? ” he said.
Hacken, a five-year-old company that tests blockchain-based projects for security flaws, employs about 80 auditors, developers and other crypto specialists. Many contribute to the war effort by finding vulnerabilities in Ukrainian and Russian computer systems and reporting the information to Kyiv’s Ministry of Digital Transformation or National Security and Defense Council, Mr. Budorin, 35, said.
Hacken’s Liberator application, which allows users to lend their computing power to launch distributed denial-of-service attacks against Russian propaganda sites, counts more than 100,000 downloads. The company is also contributing to targeted efforts against Russian companies, including an attempt to pressure the suppliers of Russian military footwear manufacturers, Mr. Budorin said.
Non-state actors supporting both sides of the conflict have exchanged fire mostly via low-impact cyberattacks. Those hitting Russian targets have met with little scrutiny despite pushes by Washington and Brussels in recent years to set international norms limiting such cyber activity, said Stefan Soesanto, senior cyber defense researcher at the Center for Security Studies at Swiss university ETH Zurich.
“Within the Ukraine conflict, a lot of norms and rules for non-state behavior—or even company behavior—are gone now,” he said.
mr. Budorin, sees Hacken’s offensive efforts in terms of right and wrong. “This is not the time to be afraid of something,” he said.
Hacking’s journey across Europe began Feb. 14, as Western officials warned of a Russian invasion. Some employees discounted the possibility of an attack but in a meeting at Hacken’s office, located in a former Russian military factory in Kyiv’s central district, company leaders advised the team to work elsewhere for two weeks. mr. Budorin said they thought the move would only be temporary. The company offered $4,000 to workers who left the country and $2,000 to those who relocated within Ukraine.
Chief Business Development Officer Yevheniia Broshevan and others were on a plane to Barcelona the following day. Other colleagues went to Turkey, Austria or western regions of Ukraine. Nine days later, Russian forces invaded. By that time only a few dozen Hacken employees remained in the country to face the bombing raids and occasional communications blackouts.
“After all of that, we realized how lucky we were to have made the decision early,” Ms. Broshevan said.
Hacken executives said they split the company into two teams to maintain focus amid the flood of news alerts about Russia’s onslaught and Telegram chats from family and friends.
One team handles Hacken’s core business as it attempts to grab a greater share of the cryptosecurity market and develop subscription-based software slated for rollout later this year. The other pitches into the loosely organized cyber counteroffensive against Russia.
For Denys Ivanov, Hacken’s 35-year-old chief operating officer, making money to support Ukraine, along with pitching into the digital war effort, is better use of the team’s expertise than taking up arms. It has also helped him overcome a sense of guilt for leaving the country as it was being attacked.
“The feeling that you were safe was so bad,” Mr. Ivanov said.
mr. Ivanov said he and his wife went to Spain initially without their two children, who stayed behind in Ukraine with his parents. Four days after the war began, Mr. Ivanov flew to Bucharest, Romania, took buses and taxis to the edge of Moldova and crossed into that country by foot to meet his parents at a checkpoint on the Ukrainian border. He then drove back to Barcelona with his children—aged six and seven—over the next three days. His parents stayed in their hometown in the Odessa region, far from the most intense fighting.
Hacking executives are now planning for the long term. Office space and cost-of-living expenses in Spain were pricey, they said, so the company last month moved to Lisbon.
mr. Ivanov went ahead to the city to scout out flats and send videos back to colleagues, renting about 20 apartments on their behalf. The company is offering employees 500 euros extra each month to relocate there.
Hacken has continued to grow in revenue and headcount, despite cutting ties to Russian customers unless they denounce the war, said Mr. Budorin, the chief executive. The company generates roughly $1 million a month in revenue and is profitable, he said. Hiring new employees has proved easier than expected, Mr. Budorin added, given that so many Ukrainian tech workers are out of jobs. The World Bank has estimated Ukraine’s economy will contract by 45% this year.
Adjusting to a working life with colleagues in a Lisbon office he described as “cozy,” Mr. Ivanov, the chief operating officer, said he’s trying to save money on food and other expenses as he budgets for educating his children and sending money to five family members back home.
“Each of us [is] just waiting until Ukraine is going to win this war,” he said. “And each of us thinks it’s our mission to get back and to try to rebuild.”
write to David Uberti at email@example.com
Copyright ©2022 Dow Jones & Company, Inc. All Rights Reserved. 87990cbe856818d5eddac44c7b1cdeb8