JSC “Future” (F6) Expert analyzed Number of leaks from the Russian corporate database throughout 2025 and the first six months of 2026. As a result, 326 publications of such material were found, almost double the number of leaks of databases from companies in Latin America, the Middle East and Africa, Asia Pacific and other CIS countries (164 in total).
Image credit: Kevin Ku/unsplash.com
Experts attribute the massive Russian database breach to the increasing number of cyberattacks targeting businesses and government organizations during geopolitical conflicts to steal data and cause maximum damage to businesses and their customers. The discovered database contains a total of 1.175 billion lines containing information from Russians.
“Russia has historically been one of the most deeply developed digital ecosystems. Government services, banking, telemedicine, deliveries, car sharing – all of these generate huge amounts of personal data. Where there is a lot of data, there are a lot of potential failure points. In countries in Latin America, the Middle East or Africa, penetration levels of digital services tend to be lower, which means there is nothing to steal yet – there is less data to accumulate.””, said Igor Bedrov, Chairman of the Committee to Combat Technological Crime of the Constitutional Court of the Russian State Security Service.
Mr. Bedrov added that he expected leaks in Russia to stabilize as Russia’s existing anti-fraud legislation changes and its enforcement develops. The authorities have taken steps, not to deal with the consequences of such incidents, but to systematically reduce the likelihood of such cases occurring, including cooperation between citizens and cybercriminal groups.
If Russian database leaks are not taken into account, Latin America accounts for 33% of all recorded leaks. 29% of the breaches occurred in the Middle East and Africa, 8% in the Asia-Pacific region, and 4% in the CIS countries. The database with the largest number of data rows is from the CIS countries. In the Central Asian country, the stolen databases contained a total of 257 million rows of data – more than one-third of the world’s data volume. Therefore, Tajikistan accounts for about 217 million lines (84% of the total number of records), Kazakhstan – 25 million lines (10%), Uzbekistan – 15 million lines (6%). It’s worth noting that a single row in a database leak may contain a different set of profiles.
“Although we observed a decrease in the number of public databases of Russian companies in the first half of 2026, the intensity of cybercriminal attacks against Russian organizations aimed at causing maximum damage remains at an unprecedented high level. I would like to point out that without modern solutions in the field of information security and professional actions of information security teams, the damage to Russian companies will be even greater.” ——Elena Shamshina, Technical Director of F6 Cyber Intelligence Unit said
If you find an error, select it with your mouse and press CTRL+ENTER.
