Rostelecom Investigates Suspected Cyberattack on Contractor

Russian telecommunications giant Rostelecom is investigating a suspected cyberattack on one of its contractors after hackers claimed to have leaked the company’s data. The hacker group, known as Silent Crow, published a data dump containing thousands of customer emails and phone numbers allegedly stolen from Rostelecom.

The contractor in question is responsible for maintaining Rostelecom’s corporate website and procurement portal, both of which were reportedly targeted by the hackers. Rostelecom stated that they are currently reviewing the database to determine the extent of the compromised data and whether it is related to the company. Initial findings suggest that no highly sensitive personal data was leaked.

As a precaution, Rostelecom has advised users of the affected websites to reset their passwords and enable two-factor authentication. The Russian Ministry of Digital Development confirmed that the breach did not impact the state services portal and that no sensitive data from the operator’s subscribers had been leaked online.

Silent Crow, a hacker group with unclear origins and motives, publishes leaks on a private Russian-language Telegram channel without demanding ransoms from victims. Earlier this month, the group claimed responsibility for breaching a Russian government agency, Rosreestr, and a subsidiary of Russia’s largest private bank, Alfa-Bank.

The cyberattack on Rostelecom is one of several recent attacks against prominent Russian organisations. Other targets include Russia’s main electronic trading platform for government and corporate procurement, Roseltorg, and the Russian internet provider Nodex. These incidents highlight the growing cybersecurity threats faced by Russian businesses and state agencies.

Last November, Rostelecom’s president, Mikhail Oseyevsky, stated that the personal data of all Russians had already leaked online, emphasising the pervasive nature of cyber threats in the country.