Rosstat Suffers Massive Cyberattack Exposing War Casualty Data
Hackers exfiltrated 23TB of data from Russian state servers, revealing sensitive military statistics.
1Massive State Data Breach
The Russian Federal State Statistics Service, known as Rosstat, confirmed a major security incident occurring over the Halloween weekend. Hackers successfully penetrated the agency's central and regional IT infrastructure. While the organization initially claimed no sensitive data was leaked, external groups have provided evidence of a massive 23TB exfiltration event.
2Attacker Group Claims
The cyberattack was executed by the groups Belarusian CyberPartisans and Silent Crow. These actors gained deep access to the agency's electronic document management systems and virtualization platforms like VMware ESXi. By compromising domain controllers, the attackers secured administrative control over internal circuits, allowing them to extract vast quantities of official data.
3War Casualty Figures Revealed
The breach resulted in the public disclosure of highly sensitive military statistics regarding the war in Ukraine. The hackers published figures claiming 1,584,910 Russian military personnel casualties since the conflict began. These numbers have been strictly classified by the Russian government since 2024, making this leak a significant challenge to state information control.
4Combat Asset Losses
Beyond human casualty figures, the stolen data provided insights into equipment losses. The documents suggest the loss of 587,409 unmanned aerial vehicles, or UAVs. This figure indicates that drone technology constitutes a significantly larger portion of combat asset usage compared to traditional heavy equipment like tanks, artillery, or manned aircraft systems.
5Agency Response and Denial
Rosstat officially reported that its monitoring systems detected suspicious activity during the weekend breach. The agency stated that its infrastructure continued to function normally despite the intrusion. They officially denied that any databases protected by law were compromised, contradicting the claims made by the hacker groups regarding the 23TB of stolen information.
6Investigation and Security Protocols
Specialized units in information security and law enforcement agencies are currently investigating the incident. These teams are working to identify the specific vector of the attack and the sources of the threat. The investigation focuses on how the attackers bypassed security layers to access the Main Interregional Center for the Processing of Information.
7Infrastructure Vulnerability Analysis
The attackers gained access to the agency's central office and regional units, demonstrating a deep penetration of the federal department's network. By compromising virtualization systems, the hackers were able to move laterally across the infrastructure. This level of access suggests a sophisticated operation that bypassed standard security measures protecting critical state information resources.
8Implications of the Leak
The publication of these figures is unlikely to be verified by official Russian sources, given the state's strict control over war-related information. The incident highlights the vulnerability of state statistical agencies to large-scale cyber espionage. This breach serves as a stark reminder of how digital infrastructure can influence the narrative of ongoing conflicts.