Rosstat Confirms Cyberattacks, Denies 23 TB Data Leak Claim

Rosstat, Russia's Federal State Statistics Service, has acknowledged that its servers came under coordinated cyberattacks between October 29 and 31. While confirming the attacks, the agency flatly rejected claims by hacker groups, including the Belarus-rooted CyberPartisans and Silent Crow, that tens of terabytes of data were stolen.

The groups say the haul totals 23 TB and includes material marked "for official use," among it information on Russia's war losses. None of this has been verified, and the situation is still developing. For now there are two competing accounts: the agency admits an attack but denies losing data, while the groups insist they walked away with a huge trove.

Why Rosstat matters

Rosstat serves a role similar to the US Census Bureau and Bureau of Labor Statistics or the UK's Office for National Statistics: it produces the country's official socioeconomic figures. It is not a major military target, so the interesting question is less about the attack itself than about what data the agency might hold.

Still, if accurate war-loss figures were to emerge from the alleged dataset, it could be a significant win for Ukraine and its supporters. Rosstat is also known to have stopped publishing annual cause-of-death statistics from 2024. According to the hacker groups, the stolen data includes information on war losses that is not officially released, though no independent proof has been presented.

What the hacker groups claim

The groups say the agency's entire IT infrastructure was wiped. Their published inventory lists domain controllers, databases, servers, virtualization systems, document workflow, workstations, admin consoles and VPN, as well as internal systems such as STATEK, CSOD, Demography, SED, ESSO, OFSN and StatRegister, along with an internal employee monitoring system. They say the agency's websites were affected as well.

Rosstat's website was reportedly defaced with hacker messages and logos, and it was unreachable at the time of writing. CyberPartisans promises to release more sensitive information once it finishes reviewing the data. The initial statements are said to include evidence and a detailed breakdown, but their accuracy has not been confirmed.

The casualty figures in the graphic

A graphic shared by the groups, which bears the Silent Crow logo, claims that between 25,000 and 50,000 Russian soldiers have died each month over the past two years. If the leak is genuine, the figure for October 2026 appears to sit very close to 50,000. These numbers have not been independently verified, and Rosstat denies that any data leak took place.

The same groups have reportedly claimed responsibility for earlier incidents in 2025, including an attack that disrupted Aeroflot's IT systems and one on a state real estate company involving two billion records. Both groups are designated as extremist and banned in Russia. As more details emerge, it should become clearer whether the data was actually taken and what it contains.