Threat watch / Attack
Rosstat: destructive cyberattack on Russia's statistics service
Russia's Federal State Statistics Service (Rosstat) says its information resources were hit by "targeted destructive cyberattacks" from October 29 to November 1. Two hacktivist groups, Silent Crow and the Belarusian Cyber Partisans, defaced its sites and claim to have taken 23 TB of data. Rosstat says no leak of databases or protected information has been identified.
- Sector
- Government & politics
- Way in
- Not public yet
- Product or vendor
- None named
- How it happened
- Not public yet Checked 9 Nov 2026
- What was stolen
- Disputed. The groups claim about 23 TB, including internal documents, statistical and personal data and the document management system. Rosstat says: "Compromising databases and leakage of information protected by law has not been identified."[1][2] Checked 9 Nov 2026
- Who was impacted
- Rosstat itself: its federal and regional websites were defaced, and its main site was still unavailable when Cybernews reported. The groups claim they destroyed several internal systems; Rosstat has not confirmed which systems were affected.[1][2] Checked 9 Nov 2026
- Threat actor
- Not attributed. Claimed on Telegram by Silent Crow and the Belarusian Cyber Partisans, according to TechRadar and Cybernews. Rosstat has not named the attackers.
Timeline
- Start of the attacks, according to Rosstat: "From October 29th through November 1st, Rosstat's information resources were subjected to targeted destructive cyberattacks." [2]
- Hacker logos and a message in Belarusian appear on Rosstat's federal and regional sites. Silent Crow and the Belarusian Cyber Partisans claim 23 TB of data and say they reached domain controllers, then the virtualisation systems. These are the groups' claims. [1][2]
- TechRadar reports that Rosstat confirmed the attack to Kommersant and RBC, denies any leak and says its specialists are still establishing the attack vector. [1]