Russia has recently experienced a series of significant disruptions affecting key services such as air transportation, pharmacy chains, and food delivery, raising concerns about cybersecurity vulnerabilities and potential data breaches. While some incidents are confirmed as cyberattacks, others are suspected due to their close timing and nature.
Aeroflot suffered a major IT system failure on July 28, leading to flight cancellations and delays. Hacker groups Silent Crow and “Cyberpartisans BY” claimed responsibility, stating they compromised and destroyed the airline’s internal IT infrastructure, including flight data servers. Aeroflot acknowledged the incident but did not provide details on the extent of the damage.
On July 29, pharmacy chains Stolichki and Neofarm experienced technical malfunctions, with some outlets ceasing operations and online orders becoming unavailable. The company later attributed the cause to a hacker attack.
The website and mobile application of the VkusVill store chain temporarily stopped working on July 30, preventing users from placing orders. The company cited a “local internal failure,” assuring that data was unaffected. Similar issues affected ROSTIC’S and the Samokat food delivery service, although these incidents have not been officially linked to cyberattacks.
Experts suggest that users should remain calm and avoid panic regarding personal data breaches. One internet security specialist pointed out that numerous data leaks of Russian citizens have occurred in recent years, potentially diminishing the impact of new breaches.
According to Alexander Vurasko, Director of Development of External Digital Threats Service, companies are obligated to notify customers if data leaks occur. He added that the primary concern for users might be increased scam activity, as phone numbers could be re-exposed in databases.
Cybersecurity specialist Sergei Vakulin concurred, stating that while “callbacks” from scammers are a potential issue, loyalty card data and bonuses are unlikely to be affected. Companies typically restore systems from backups, and attackers have no incentive to erase points and discounts.
Vakulin recommends changing passwords on affected services as a preventative measure. Companies may also forcibly reset passwords if critical information is leaked.
Regarding Aeroflot, cybersecurity expert Alexander Vurasko noted that while hackers claimed access to flight databases, no confirmed leaks have been reported. The true extent of the breach remains uncertain.
Both hacker groups involved in the Aeroflot attack have a history of targeting government structures in Belarus and Russia, suggesting a political motivation behind the incidents. Expert Sergei Vakulin believes the attacks are coordinated and aimed at enhancing the hacker groups’ reputation within their community.
Experts advise users to change passwords on affected services, especially those with the same combinations as those used on hacked services. They also emphasize the importance of being cautious of potential scams and verifying information through official channels if contacted by suspicious individuals claiming to be from official institutions.
While cyberattacks are becoming increasingly common, experts believe the main losses are borne by companies rather than individual users. However, users should still remain vigilant about their information security.
Unfortunately, experts note that minimizing one’s digital footprint is challenging, as personal data already exists in various databases, including state-level ones. Data transfer occurs even at the state level, with passport information and other personal details stored on government servers.
Despite these concerns, cybersecurity specialists offer a positive outlook, suggesting that data leaks are becoming less impactful as most personal information is already widely available. In the current digital age, worrying about data security may be less crucial than before.