Rostelecom data allegedly leaked after an attack on its contractor

One of Russia’s leading telecommunication firms, Rostelecom, revealed that it has an ongoing investigation about a possible cyberattack on one of its contractors.

Based on reports, the company launched its investigation after a group of hackers claimed to have leaked its data. These hackers are members of the notorious hacking group dubbed Silent Crow.

Earlier this week, the group released a data dump that contains various details, including thousands of client emails and phone numbers, which they obtained from the telecommunication firm.

 

Rostelecom revealed that the affected contractors are in charge of maintaining its corporate website.

 

The Rostelecom corporation explained that one of its contractors, who suffered the alleged cyberattack, maintains its website and procurement portal.

The Russian-owned media assures the public that they are investigating the purported infected database to find out which information was compromised and whether it is critical to the company.

Based on initial assessments, no sensitive personal data was leaked. However, the business encourages its users of the claimed compromised websites to change their passwords and enable 2FA as a precautionary measure.

On the other hand, the Russian Ministry of Digital Development declared that the breach did not affect the state services portal and that no sensitive data from the operator’s subscribers was leaked online in response to the concerns of relevant parties.

The researchers have yet to uncover the origins and motivation of the cybercriminal organisation that executed the alleged attack. It posts leaks on a secret Russian-language Telegram channel but does not demand ransoms from victims.

Earlier in January, the gang claimed responsibility for breaching Rosreestr, a Russian government agency that manages property and land records. The government disputed the attack but stated it is investigating the group’s accusations.

Furthermore, the hackers claimed to have breached Alfa-Bank, Russia’s largest private bank. Alfa-Bank offers life and health insurance and a loyalty program for its corporate clients. Alfa-Bank has not responded to these claims. The cyberattack on Rostelecom is one of several recent attacks on significant Russian companies.

Russian entities may be the primary target of this threat group, increasing the suspicions that the hacking group may have been executing the attacks due to the geopolitical conflict. Still, the hacking group’s true motivation is a mystery.