© David W Cerny / ReutersCzech Prime Minister Andrej Babis
The agency, known as the BIS, said in its annual report on December 3 that the cyberattacks were part of the most serious wave of cyberespionage to target the Czech Republic.
It says 150 e-mail accounts were hacked in an attack by the Russian state that began in early 2016 and was not discovered until 2017.
It also says a separate Russian cyberattack began in December 2016.
The BIS report concludes that the attacks were part of the Turla malware campaign by Russia's FSB intelligence agency and the APT28 or "Fancy Bear" campaign by Russia's GRU military intelligence agency.
Other European countries have faced similar attacks.
Czech Prime Minister Andrej Babis said his government will discuss the agency's conclusions in January.
Comment: Funny how Russia is seemingly the only country to commit these kinds of attacks (North Korea and Iran sometimes get an honorable mention), if we are to believe the public statements from western governments. The UK, US, and Israel are never involved in such attacks. And they certainly don't attempt to leave digital signatures implicating their enemies. You'll just have to take their word for it.