Hackers Breach Russian Statistics Agency Exposing Massive War Casualty Data
Cyberattackers claim to have exfiltrated 23TB of data revealing high Russian war-related fatalities.
1Systematic Agency Infiltration
Hacktivist groups Belarusian Cyberpartisans and Silent Crow claimed responsibility for a major cyberattack on Russia's Federal State Statistics Service, Rosstat. The hackers stated they maintained unauthorized access to the agency's IT infrastructure for six months before launching the final operation between October 31 and November 1, 2026.
2Conflicting Casualty Estimates
The leaked data has produced widely varying casualty figures. Belarusian Cyberpartisans estimated 393,881 deaths based on specific military operation records, while Silent Crow reported up to 450,100 deaths using a broader methodology. Separately, other reports citing the same breach have mentioned figures as high as 1,584,910 total personnel casualties.
3Official Agency Response
Rosstat acknowledged that its systems were targeted by cyberattacks during the Halloween weekend. However, the agency explicitly denied that its databases were compromised or that any legally protected information was leaked. Despite these denials, Rosstat reported service disruptions and extended deadlines for submitting statistical data following the security incident.
4Scope of Data Theft
The hackers claim to have exfiltrated 23TB of data from Rosstat’s internal systems. This allegedly includes the agency's electronic document management system, regional unit records, and central office databases. The perpetrators stated they gained control over domain controllers, which allowed them to compromise virtualization systems like VMware ESXi and infrastructure management.
5Verification Challenges
Independent verification of the leaked records remains impossible. Russia does not disclose military casualty figures, complicating external assessments. While independent Russian outlet Mediazona, working with BBC Russian, identified 285,881 deaths via open-source research, they maintain that their count is incomplete and the actual toll is likely significantly higher than their verified data.
6Contextualizing War Losses
DeepState mapping data indicates Russia has seized approximately 73,000 square kilometers of Ukrainian territory since February 2022. Comparing this to the 450,100 death estimate suggests a ratio of roughly six deaths per square kilometer. These figures remain unverified and are subject to intense scrutiny regarding the methodology used by the hackers.
7Broader Technical Claims
Beyond human casualty records, the hackers claimed to have stolen data regarding military equipment losses. This includes a reported loss of 587,409 UAVs, suggesting a scale of drone usage far exceeding that of tanks or manned aircraft. The groups also boasted of gaining control over various vehicles within the Russian state infrastructure.
8Implications of the Breach
The incident highlights the vulnerability of state statistical infrastructure to long-term cyber espionage. While the authenticity of the specific casualty numbers remains unconfirmed, the breach of 23TB of internal data represents a significant security failure for the Russian state. Authorities are currently investigating the vector of the attack and identifying threat sources.