Rosstat confirmed targeted cyberattacks on its official resources that occurred between 29 October and 1 November. During the incident, unauthorized messages and logos of cybercriminal groups appeared on the agency's website overnight.
The service emphasized that no compromise of databases or leakage of information protected by law was detected. The page substitution was first identified by Kommersant, which also received an official comment from Rosstat.
Messages written in Belarusian appeared both in the federal section and on pages of regional offices. They were accompanied by symbols of Silent Crow and Cyberpartisans BY, organizations recognized as extremist and banned in Russia.
Silent Crow claimed penetration into internal infrastructure, destruction of systems, and exfiltration of roughly 23 TB of documents, databases, and contents from employee workstations. At the time of the original publication, however, no samples of the allegedly stolen data were provided and no independent confirmation exists.
According to Rosstat, security monitoring promptly detected suspicious activity, after which specialists launched an internal investigation. The attack vector and threat sources are being established jointly with law enforcement agencies.
Thus, website defacement has been verified, while the actual scale of any deeper intrusion and the fate of internal data remain disputed.
