The Russian Federal State Statistics Service, known as Rosstat, confirmed that its servers were targeted by coordinated cyberattacks between October 29 and October 31. While the agency denied that any data was successfully exfiltrated, two hacktivist groups, the Belarusian CyberPartisans and Silent Crow, assert they have seized 23 terabytes of information from the organization.
Rosstat functions as the central statistical body for the Russian government, similar to the U.S. Census Bureau or the UK Office for National Statistics. The agency is responsible for collecting and publishing key socioeconomic data, including demographic trends and mortality rates. The breach has raised concerns about the potential exposure of sensitive government records.
Alleged War Casualty Data Exposed
The hacktivist groups claim the stolen data includes documents marked “for official use only” regarding Russian military losses in the ongoing conflict with Ukraine. According to reports from The Moscow Times, the leaked files contain charts suggesting that Russian forces suffered between 25,000 and 50,000 fatalities per month over the last two years. The data allegedly indicates that October 2026 saw nearly 50,000 deaths.
If the figures are authentic, they would provide significant evidence for Ukrainian officials and their international supporters regarding the scale of Russian military losses. Rosstat ceased publishing annual cause-of-death statistics in 2024, making any recovered historical data particularly valuable for independent verification.
Infrastructure Wiped and Systems Destroyed
The Belarusian CyberPartisans posted evidence of the breach on social media, detailing the extent of the damage to Rosstat’s IT infrastructure. The group stated that domain controllers, databases, servers, virtualization environments, and document workflow systems were completely wiped. They also listed specific internal systems that were destroyed, including STATEK, CSOD, Demography, SED, ESSO, OFSN, and StatRegister.
The Rosstat website was defaced with hacker messages and logos during the attack. The agency remains inaccessible to the public as technical teams work to assess the damage. The hacktivist groups have warned that they intend to release additional sensitive information from the stolen cache after they have finished analyzing the contents.
Both the Belarusian CyberPartisans and Silent Crow are designated as extremist organizations and are banned within Russia. These groups have previously claimed responsibility for other high-profile attacks on Russian entities, including a disruption of Aeroflot IT systems and a breach of a state real estate company that exposed two billion records in 2025.
Source: Tom’s Hardware
