By 2024, data from more than half of Russian companies will be leaked to the darknet

This year, the number of leaks of corporate accounts with usernames and passwords reached almost 16 thousand, 60% more than the previous year. Employees sign up for insurance, healthcare and e-commerce services, which are then attacked and their customers’ data ends up on the dark web, experts say.

According to them, in almost half of the successful attacks, hackers gained access to the company’s internal systems using infected software sent via phishing emails. In 17% of the incidents, companies were attacked through letters from contractors; As a rule, attackers used hacked accounts of small and medium-sized businesses to launch an attack.

The peak of hacker activity occurred from mid-spring to early summer. A Jet Infosystem representative noted that this may be due to the widespread stereotype of some relaxation “during the holiday period.”

Analysts expect attackers to continue using techniques that are easily scalable, do not require sophisticated training, and can be easily automated to attack small and medium-sized businesses. At the same time, hackers will experiment: the less popular the tool, the harder it is to detect, says Oleg Skulkin, director of the cybersecurity company BI.Zone Threat Intelligence.

Also in 2025 there is a high probability of attacks related to the use of artificial intelligence and deepfake services, says Alexander Liskin, head of the threat research department at Kaspersky Lab. He noted that AI “opens up quite specific risks from which “Developers are not always aware.”

During the study, Jet Infosystems experts analyzed more than 10 thousand incidents that occurred in more than 100 companies, clients of the developer. The three most attacked areas in 2024 included finance, IT and real estate.