Record Number of Database Leaks Reported in Russia
In the summer of 2022, Russia experienced a record-breaking surge in the number of databases from Russian companies leaked to the public, according to Group-IB’s press service as reported to “Durov’s Code.” The company stated that over the three summer months, 140 databases were leaked online, with an all-time high of 100 leaks occurring in August alone. The total number of records exposed during the summer reached 304 million.
The largest single leak took place in August and included databases from 75 Russian companies. For comparison, only 73 databases were published during the entire spring of this year.
Industries Affected by the Leaks
Victims of the summer leaks included:
- Online delivery services
- Streaming platforms
- Transportation companies
- Construction firms
- Medical companies
- Telecom operators
- And others
Most of the leaked databases were current as of spring and summer 2022. They contained clients’ names, phone numbers, addresses, dates of birth, and in some cases, hashed passwords, passport details, order information, and other sensitive data.
Legal Action Following Major Data Breach
In April of this year, “Roskomsvoboda” and “Network Freedoms” filed a class action lawsuit in the Zamoskvoretsky Court against LLC “Yandex.Eda” to hold the service accountable for a user data leak. The parent company, LLC “Yandex,” was also named as a defendant. The lawsuit demands that the actions of “Yandex.Eda” and “Yandex” be recognized as illegal for failing to take necessary and sufficient measures to ensure the confidentiality of the plaintiffs’ personal data. The plaintiffs also request that the companies report on the measures taken to secure personal data after the leak and seek compensation for moral damages in the amount of 100,000 rubles for each plaintiff.