93← Home

Russian state statistics agency suffers major data breach

Headline from SC Media · compiled from 6 sources

Our analysis · checked against 12 sources

Rosstat confirms destructive cyberattack; hackers' 23 TB data-theft claim remains unverified

Rosstat confirms "targeted destructive cyberattacks" from October 29 to November 1, 2026, and extended companies' data-submission deadline to November 13. Two anti-Kremlin hacker groups claim they stole 23 TB or "more than 10 TB," including war-death records; this is unverified, and Rosstat denies leaks of legally protected information.

The framing"Major data breach" does fit a confirmed multi-day destructive attack that defaced Rosstat's websites and pushed a reporting deadline to November 13. But the theft rests only on the hackers' own posts, the two groups disagree on volume (10 TB vs 23 TB), and Rosstat denies any leak of legally protected data.

What the headline leaves out

  • The theft claim rests only on the hackers' posts; the two groups give different volumes, 10 TB vs 23 TB.
  • Death counts drawn from the leak conflict, 393,881 vs 450,100, and Meduza and Mediazona have not finished verifying the data.
  • Coverage's roughly 1.58 million casualty figure is Ukraine's General Staff count, not Rosstat data.
  • Rosstat denies any leak of legally protected information.

What happens next

Rosstat's extended deadline for companies to submit primary statistical data falls on November 13, 2026. Cyber Partisans said they would release a detailed account and data samples "in the coming days." Meduza and Mediazona are still checking the leaked data's authenticity, including ruling out deliberate falsification. Watch for their findings and for any Rosstat statement on the attack vector.

Possible knock-on effects
  • If verified death counts are published, the Kremlin may dismiss them as unreliable, which could limit their weight in Russian domestic debate but not abroad. (precedent: In January 2026 Peskov rejected a Western casualty estimate as not "reliable information".. Watch for: An official Kremlin or Rosstat comment on the leaked casualty figures.)
  • Disrupted systems and a pushed-back submission deadline could delay Rosstat's own data releases, which may matter to analysts tracking Russia's economy. (mechanism: Follows from the deadline for primary data moving to November 13; no source forecasts delays.. Watch for: Whether Rosstat's scheduled publications appear on time after November 13.)

Sources: Rosstat statement on attack dates (Cybernews), Rosstat denies database compromise (Pillitteri), The Record: hackers claim Rosstat breach, The Insider: 23 TB claim, Brandefense analysis of claims, Euronews: leaked data suggests 390,000+ deaths, Ukrinform: 25,000 computers claim, UA.News: deadline extended, TechRadar: attack vector undisclosed, Mallory: six-month intrusion claim, Peskov casualty dismissal, SC Media original brief

Written in our own words from the sources above, and checked claim by claim before it was published. The report below says only what each outlet said.

The report: what outlets said

SC Media reports that hackers from the groups Belarusian CyberPartisans and Silent Crow claimed responsibility for the attack[1]

According to The Moscow Times, Rosstat said its websites had been hit by a coordinated cyberattack, while hackers claimed to have stolen 23 terabytes of data[2]. SC Media reports that the attack occurred between Oct. 29 and Nov. 1, 2026[1].TechRadar reports that the hackers' access to domain controllers of Rosstat unlocked access to the organization's main data[3].Rosstat said that "The infrastructure worked normally: monitoring systems in a timely manner alerted about suspicious activity"[3], according to TechRadar's translation of Kommersant. eeNews Europe reports that the agency maintains that no database compromise or leakage of legally protected information has been identified.[4]Kommersant reported that the websites had been defaced with messages in Belarusian and the logos of the Belarusian CyberPartisans and Silent Crow hacking groups[4], according to eeNews Europe.Euronews reports that Kiberpartizany BY, another name for the CyberPartisans, claims that as of 27 August 2026 at least 393,881 Russian citizens have been killed in the war[5]. Euronews adds that Silent Crow gives an even higher figure of 450,100 dead.[5]Kyiv Post reports that the authenticity of the leaked records and the hackers' casualty estimates has not been independently verified.[6] Euronews says that Meduza and Mediazona have said they obtained access to the data published by the hackers and have begun checking it.[5]According to The Moscow Times, Russian prosecutors confirmed that a cyberattack had taken place and opened a criminal investigation[2].

Listen to the songIT Security News — November 09, 2026

Sources

  1. [1]Russian state statistics agency suffers major data breach | brief | SC Media
  2. [2]Cyberattack Hits Rosstat as Hackers Claim Huge Data Theft - The Moscow Times
  3. [3]Russian Federal State Statistics Service says it was hit by massive cyberattack — hackers steal 23TB of data, including Ukraine war casualty figures | TechRadar
  4. [4]Rosstat cyberattack: hackers claim 23 TB data theft .. ...
  5. [5]Rosstat hack: data obtained suggests over 390,000 Russian deaths in Ukraine war | Euronews
  6. [6]Hackers Claim Leaked Rosstat Data Shows 450,000 Russian Deaths

Every sentence here reports what a named outlet said, with a link to it. Compiled by 93 from the reporting below.

This topic, day by day

Russian state statistics agency suffers major data breach | 93