Russia’s Statistics Agency Hit by Cyberattack as Hackers Claim Massive Data Theft

Rosstat’s main website and regional portals were attacked over several days. The agency described the incident as coordinated and carefully planned. It said multiple areas were targeted at the same time. The attack matters because Rosstat holds major demographic and economic information, including statistics that can shape public understanding of Russia’s war losses.

Messages from the Belarusian Cyber Partisans and Silent Crow appeared on Rosstat websites. One message, written in Belarusian, said, “No one will escape accountability.” Rosstat said specialists with different expertise worked from many locations. Its monitoring systems detected suspicious activity, allowing staff to respond quickly.

Rosstat denied that databases or legally protected information had leaked. However, its main website was still inaccessible when the report was published. The hackers claimed they stole large quantities of files, but those claims were not independently verified. The incident adds to earlier claims involving Aeroflot and Rosreestr.

Rosstat is Russia’s state statistics agency. It gathers, organizes, and publishes official statistics about the country. The article identifies its work through demographic and economic data, as well as an official methodology for classifying deaths caused by military operations. That makes Rosstat an important source for understanding national conditions.

Its role is more than maintaining a website. Rosstat’s statistics can show population changes, economic performance, and causes of death. The agency also holds databases and documents, some of which may be marked “for official use only.” These records can be valuable to researchers, officials, journalists, and the public.

The article notes that Rosstat stopped publishing annual cause-of-death statistics in 2024. Other data that could help assess the war’s impact also disappeared from public access. Because of that reduced visibility, claims about stolen wartime or demographic data attracted particular attention.

The hacking groups claimed they stole 23 terabytes of data from Rosstat. That figure describes the alleged volume, not a confirmed loss. The article clearly states that the hackers’ claims could not be independently verified. Rosstat rejected the idea that databases or legally protected information had been leaked.

According to the hackers, the files included information on Russian losses in the war in Ukraine. They also claimed to have obtained demographic and economic statistics. Some documents were reportedly marked “for official use only,” suggesting that the alleged material was not all intended for public release.

The claimed contents matter because they could reveal information that has become harder to access publicly. Rosstat stopped publishing annual cause-of-death statistics in 2024, and other war-related data disappeared from public access. Still, the article provides no independent confirmation that the files exist or contain what the hackers described.

The article says the hackers’ claims could not be independently verified. It does not give a specific technical reason, so the safest conclusion is that no independent confirmation was available when the report was published. The hackers’ statements therefore remained allegations rather than established facts.

Rosstat offered a different account. The agency said its monitoring systems detected suspicious activity in time for staff to respond quickly. It denied that any databases or legally protected information had been leaked. That is an official denial from the organization targeted in the attack, not a separate investigation confirming the full situation.

The distinction matters because both claims can exist without resolving the truth. Hackers may claim access, while an agency may deny a breach. Independent evidence, such as verified files or a credible outside investigation, would be needed to settle the dispute. The article reports no such confirmation.

Sensitive demographic, economic, or wartime-loss data can affect people and public decision-making. If exposed, personal or restricted information could threaten privacy. Accurate wartime-loss figures could also influence public debate, journalism, and assessments of the war’s human cost. These are general consequences of exposing sensitive official data; the article does not document that they occurred here.

The alleged files reportedly included Russian losses, demographic and economic statistics, and documents marked “for official use only.” Publishing such material could make information available that the government has removed from public access. It could also allow outside observers to compare official records with other evidence, if the files proved authentic.

The immediate reality remains uncertain. The hackers’ claims were not independently verified, and Rosstat denied a leak. If genuine data were later authenticated, authorities might face pressure to explain it, while affected people and institutions could face privacy, security, or reputational risks.

Statistics about military deaths are politically important because they measure the human cost of war. They can inform families, journalists, researchers, and the public. Demographic and economic effects also show how conflict changes a country. Reliable figures help people evaluate official statements and understand consequences beyond battlefield reports.

The article says Rosstat’s official methodology includes deaths resulting from military operations. Yet the agency stopped publishing annual cause-of-death statistics in 2024. Other data that could help assess the war’s impact also disappeared from public access. This creates a clearer gap between what may exist in government records and what the public can see.

When publication stops, uncertainty grows. People cannot easily compare new figures with earlier data or independently assess the war’s effects. That does not prove a government is hiding losses, but it limits transparency. The hackers’ claims gained attention partly because they concerned information that was already harder to access.

A coordinated cyberattack is a planned digital assault involving multiple targets, systems, or teams at the same time. It is more organized than an isolated intrusion. The article says Rosstat’s attack targeted several areas simultaneously and involved specialists with different expertise working from many locations. That coordination can make detection and defense more difficult.

Defense depends on several layers. Monitoring systems watch for unusual activity, such as unexpected access or changes. Data protection limits who can reach databases and helps keep legally protected information secure. Incident response means investigating alerts, isolating affected systems, and taking quick action. Rosstat said its monitoring detected suspicious activity early, allowing staff to respond quickly.

Rosstat denied that databases or protected information leaked, but the website remained inaccessible at publication time. The incident shows why detection and response matter even when an organization reports no confirmed data loss. The article does not provide technical details about Rosstat’s protections or the attack’s exact methods.