Since the beginning of the year, the number of reported data breaches in Russia has increased by 80%

The figure also turned out to be 35% higher than for the entire year 2023, experts said. According to them, the stolen data reached the Internet in part or in full only in 55% of the cases (316 incidents), and some of it can only be judged from fragments of published databases, files or reports from hacker groups.

The number of information lines published year after year increased by 15%, up to 800 million. At the same time, the total volume of publicly available data decreased by 95%, up to 5 TB, which is explained by a decrease in. number of incidents during which hackers penetrated deep into infrastructure companies and obtained large amounts of unstructured information, analysts said.

In addition, the attackers began publishing online databases obtained back in 2023, but that had not previously appeared in public space. Experts also analyzed the hidden segment of the Internet and Telegram channels and found 120 cases of defacement, a type of attack during which hackers replace the official web page of a company’s website with another with negative content.

The first place in the number of incidents related to leaks was occupied by retail trade: it accounted for 182 cases of this type. In second place is the service sector (101 incidents), in third place is the public sector (45 incidents). In terms of the number of lines filtered, the financial sector occupies first place (409 million), retail trade second (160 million) and the services sector third (69 million).

In addition, attackers began to massively use phishing domains of the third level and deeper levels and, “as a rule, not to mention brands,” making it difficult for automated monitoring tools to find such sites, analysts said. Thus, in 2024 the number of domains of this type increased to 40% compared to 16% in 2023.

On October 31, 2024, the Telegram channel “Information Leaks” (DLBI) reported that a database called “VTB Clients” had appeared on a shadow forum. According to DLBI, the leaked matrix contains 6.1 million lines with full names, phone numbers, email addresses and dates of birth.

The VTB press service informed RB.RU that the bank did not record any leaks of client data. “The next “database” that appeared on certain dubious resources is not the database of the VTB bank,” the credit institution claims.