Rosstat Confirms Cyberattacks as CyberPartisans and Silent Crow Claim Data Theft and Wiping

Russia’s Federal State Statistics Service, Rosstat, acknowledged coordinated cyberattacks against its servers between October 29 and 31 but denied a massive data leak. Belarusian CyberPartisans and Silent Crow claimed responsibility, alleging extensive data theft and destruction of the agency’s IT infrastructure. CyberPartisans’ own statement reported more than 10 TB of stolen documents and databases, while Tom’s Hardware reported a 23 TB claim. The attackers alleged that the material included classified information and restricted wartime casualty statistics; the authenticity of the stolen data and published casualty figures has not been established.

CyberPartisans claimed the groups entered Rosstat’s network roughly six months earlier, moved laterally for months, and began destructive operations overnight on October 31–November 1. They alleged wiping physical and virtual servers, storage, databases, document-management systems, workstations and VPN infrastructure, including systems supporting demographic and statistical reporting. Rosstat’s website was reportedly defaced and remained inaccessible when Tom’s Hardware reported the incident. The claimed scale of internal destruction remains unverified, but the incident highlights the operational risk of prolonged attacker access to centralized statistical systems; organizations should prioritize privileged-access monitoring, network segmentation and tested, isolated recovery copies.