Hackers hit a US state auditor and courts as Russia pressures Romania and Italy seeks EU rules

Fact-check index: 52/100 — The four underlying news items (Ohio auditor breach, Atlantic Council court-hacking brief, Crosetto's EU hybrid-warfare call, Russian measures against Romania) are accurately reflected at headline level, but the article's connective analysis — the 'one contest over trust' hypothesis and claims that Informat.ro or the Atlantic Council establish 'fragmentation' or a policy gap — goes well beyond what the thin source material (mostly bare headlines) actually states.

• Ohio's state auditor is investigating a cyberattack that may have been the work of foreign actors — Matches the Yahoo headline 'Foreign actors may be behind cyberattack on Ohio Auditor of State' almost verbatim; 'investigating' and the office's role are reasonable but unconfirmed extrapolations from a bare headline.
• Federal courts face a rising wave of hacks threatening sensitive data, including informants' identities, per an Atlantic Council brief — Directly matches the Atlantic Council abstract: 'rise of hacks at federal courts... putting sensitive data, such as informants' identities, at risk.'
• Litigation involving spyware raises the stakes because case files can expose how governments and companies deploy surveillance tools — Source only says spyware litigation puts 'even more sensitive data' at risk; the specific framing about exposing surveillance-tool deployment is the article's own elaboration, not stated in the brief's summary.
• Guido Crosetto called for common EU rules against hybrid warfare, citing risk of influencing young people through digital profiling — Matches the Informat.ro headline almost word-for-word.
• Informat.ro separately reported an intensification of Russian active measures aimed at Romania and Romanian voters — Headline confirms 'Intensification of Russian anti-Romanian active measures' but does not specifically mention 'voters' — that detail is added by the article.
• The four events describe one contest over control of trust in democratic institutions and persuadable voters (the 'Hypothesis') — This is the article's own interpretive framing; it explicitly concedes the sources show no shared perpetrator, timeline, or technical link, so it is speculation rather than a sourced fact.
• Ohio's attribution of the breach is unconfirmed, and no source connects the four stories to each other — Accurately reflects that the Yahoo headline uses 'may have been' and that none of the other three sources reference the Ohio incident or each other.
• Crosetto's appeal shows EU governments still treat these intrusions as separate domestic matters rather than one threat needing joint rules, 'per Informat.ro' — Attributed to Informat.ro, but the source material only gives a headline about Crosetto's call for common rules — it does not state or imply that governments are currently treating incidents as 'separate domestic matters'; this is the article's own inference presented as sourced.
• The US shows the 'same fragmentation' — the Atlantic Council brief notes no uniform standard protects court data the way other critical infrastructure is protected — The brief's summary only poses the question 'What protective measures should be in place to safeguard evidence?' — it does not state a finding about absence of uniform standards or compare court data to critical-infrastructure protections.