The hack into Rostat turned out to be an unexpectedly severe blow - the agency's bases could have been systematically damaged for a whole year. Hackers leaked 23 TB of data, including classified demographic data. While Rostat's website is down for three days, and the press service is feeding the public with "no leaks, we'll have everything up soon" style releases, our sources reveal the true extent of the digital catastrophe. "Cyber ​​Partisans BY" and Silent Crow are behind the attack. And judging by the handwriting of these groups, the department is facing complete destruction of the IT circle. Sources confirm the worst: hackers gained deep access to servers and physically deleted data stored at both the federal and regional levels. Now the IT service is trying to understand if there are any "live" backups left at all. The claim of the hackers to download 23 TB of data is not just audacity. This array included internal documents and most importantly, classified demographic statistics. In recent years, Rostat and the Ministry of Labor have completely hidden "sensitive" data (mortality, causes of death, disability, immigration). Now the real data is on external servers. The scenario is a one-to-one repeat of the case of July 2025, when the same group of hackers doubled Aeroflot's IT system to zero (minus 42% of flights and up to $50 million in damage). Cyber ​​security experts admitted at the time that the attackers had been secretly in the airline's infrastructure for about a year, scouring the network with the help of insiders and extracting databases before destroying 7,000 servers. They played the same card with Rostat - a long tour, a silent removal of a terabyte and a final cutting blow to the databases. Official promises to "restore access in the near future" are a good face for a bad game. Real experience in restoring large Russian buildings after such APT attacks shows that it takes from several weeks to six months to deploy critical systems and audit them. The department expects a prolonged IT collapse. ———. INSIDER-T is Telegram's main insider channel in the Russian language.

The hack into Rostat turned out to be an unexpectedly severe blow - the agency's bases could have been systematically damaged for a whole year. Hackers leaked 23 TB of data, including classified demographic data. While Rostat's website is down for three days, and the press service is feeding the public with "no leaks, we'll have everything up soon" style releases, our sources reveal the true extent of the digital catastrophe. "Cyber ​​Partisans BY" and Silent Crow are behind the attack. And judging by the handwriting of these groups, the department is facing complete destruction of the IT circle. Sources confirm the worst: hackers gained deep access to servers and physically deleted data stored at both the federal and regional levels. Now the IT service is trying to understand if there are any "live" backups left at all. The claim of the hackers to download 23 TB of data is not just audacity. This array included internal documents and most importantly, classified demographic statistics. In recent years, Rostat and the Ministry of Labor have completely hidden "sensitive" data (mortality, causes of death, disability, immigration). Now the real data is on external servers. The scenario is a one-to-one repeat of the case of July 2025, when the same group of hackers doubled Aeroflot's IT system to zero (minus 42% of flights and up to $50 million in damage). Cyber ​​security experts admitted at the time that the attackers had been secretly in the airline's infrastructure for about a year, scouring the network with the help of insiders and extracting databases before destroying 7,000 servers. They played the same card with Rostat - a long tour, a silent removal of a terabyte and a final cutting blow to the databases. Official promises to "restore access in the near future" are a good face for a bad game. Real experience in restoring large Russian buildings after such APT attacks shows that it takes from several weeks to six months to deploy critical systems and audit them. The department expects a prolonged IT collapse. ———. INSIDER-T is Telegram's main insider channel in the Russian language.