ru.themoscowtimes.com Russia Leads Global Data Breaches with 326 Incidents in 2025-2026
Article Content
- •Russia recorded 326 data breaches compromising 1.175 billion records in 2025-2026.
- •Cybercriminals are targeting Russian organizations at unprecedented levels despite a decrease in compromised databases.
- •In 2024, Russia was responsible for 8.5% of global data breaches, ranking second after the U.S.
In Russia, 326 data breaches were reported in 2025 and the first half of 2026, compromising 1.175 billion records of personal data. This figure is nearly double the total breaches in Latin America, the Middle East, Africa, the Asia-Pacific region, and other CIS countries combined. Despite a decrease in the number of compromised databases in early 2026, cybercriminals continue to target Russian organizations at unprecedented levels. The Russian digital ecosystem, characterized by extensive personal data generation through services like banking and telemedicine, presents numerous vulnerabilities. In 2024, Russian entities accounted for 778 out of 9,175 global data breaches, placing Russia second worldwide after the U.S. in data compromise incidents. Experts emphasize the ongoing threat to Russian organizations as attackers aim to inflict maximum damage.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (37)
Continue Reading
China-linked Hackers Exploit PHP2Shell to Compromise 25 Firewalls A China-linked threat actor has exploited vulnerabilities in PHP2Shell (CVE-2026-109618, CVE-2026-109619) and the Fragnesia privilege escalation bug (CVE-2026-46300) to gain root access to 25 firewalls, including those in an U.S. The attackers identified vulnerable systems using the FOFA search engine and executed…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…