therecord.media Poryadok Retailer Faces Major Disruption from Cyberattack
Article Content
- •Poryadok closed stores and suspended online services for five days due to a cyberattack.
- •Customers reported being unable to access orders or customer support during the disruption.
- •The attack's vector and potential data compromise remain undisclosed.
Russian home goods retailer Poryadok experienced a cyberattack that forced it to close several stores and suspend online services for five days. The company operates 48 stores across 32 cities and reported technical issues starting on Sunday, with its website, mobile app, and physical stores becoming temporarily unavailable. Poryadok confirmed the disruption was due to a cyberattack but did not disclose the attack vector or timeline for restoring services. Customers were unable to collect orders, access loyalty accounts, or reach customer support, leading to complaints about unfulfilled orders. Local media reported ongoing closures, particularly in Voronezh and Kursk. The full extent of the disruption remains unclear, and it is unknown if any customer data was compromised. Other Russian businesses have faced similar cyberattacks in recent months, indicating a broader trend of targeting retail and service sectors.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Anywayanyday in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What services are currently unavailable?
Is customer data at risk?
When will services resume?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…