Data breach affected 90% of Russians – Sber

An analysis by Sberbank conducted in late 2023 and early 2024 showed that the main sources of leaks were online stores and medical institutions, and not credit institutions, as previously thought. According to Kuznetsov, the percentage of bank leaks is only 2%. He also noted that the peak of leaks occurred in 2023, and in 2024 their number began to decrease.

The bank also recorded a record number of fraudulent calls. In February-March 2024, their number reached 20 million per day. In recent months, the number of calls has decreased to between 6 and 6.5 million per day, but the scammers’ schemes have become more thoughtful and complex, the lending institution noted.

In addition, Kuznetsov emphasized that the number of cases of cash theft continues to grow and that in 2024 the total damage from such crimes could amount to about 250 billion rubles. He also added that Russia’s economic losses from cyber attacks that continue in the context of cyber warfare could reach one trillion rubles by the end of the year if the situation does not change.

On January 1, 2025, Russian Presidential Decree No. 250 comes into force, increasing the requirements for the protection of personal data. At the same time, amendments to the Code of Administrative Offenses and the Criminal Code are being prepared, which provide for high fines for violations in the field of information security.

Thus, if a data breach affects more than 100 thousand people, the fine will be up to 15 million rubles instead of the previous 100 thousand rubles. In case of repeat offenses, the bill provides for fines with a maximum threshold of 500 million rubles.

According to experts, the presidential decree affects at least 500,000 organizations, that is, approximately 90 to 95% of the entire Russian economy. RB.RU talked about how companies, including those that do not have the necessary resources to ensure cyber protection, can prepare for the changes.