ProtonMail believed that it was affected by two separate attacks, the first led by a group of hackers known as the Armada Collective and the second by an unknown, more technically advanced group with abilities similar to a state-sponsored group.
ProtonMail认为，这实际上是受两个独立的攻击，先为首的一批黑客被称为Armada Collective，第二个由一个未知的、类似于一个国家支持组的能力在技术上更为先进的集体。