Russia’s Federal State Statistics Service, Rosstat, confirmed cyberattacks on its information resources between October 29 and November 1, 2026. The agency said it found no evidence that databases were compromised or legally protected information leaked. Belarusian Cyber Partisans and pro-Ukrainian group Silent Crow claimed a far-reaching intrusion, but the reported scale of data theft and damage has not been independently confirmed.
10
18
5
What Rosstat confirmed
Rosstat described the attacks as carefully prepared and said they targeted several areas simultaneously. Reports also documented the groups’ logos and a Belarusian-language message—translated as “No one will escape responsibility”—appearing on Rosstat websites.
10
13
1
That establishes an acknowledged attack and a visible defacement, but not the extent of access to Rosstat’s internal systems. The agency’s statement that it had detected no database compromise or protected-information leak is its account of the incident; it does not independently resolve the hackers’ competing claims.
18
5
What the groups claim—and what remains unverified
Cyber Partisans and Silent Crow said they controlled about 25,000 computers across Rosstat’s central office, regional divisions and main interregional data-processing center. They also claimed to have taken roughly 23 terabytes of information and damaged or destroyed internal IT infrastructure.
4
5
1
The groups said the material included information concerning Russian military losses in Ukraine. But the available reporting does not independently establish that the data was taken, verify its contents or confirm the claimed extent of infrastructure damage.
1
5
10
A website defacement is evidence that Rosstat’s public-facing resources were affected; by itself, it does not demonstrate control of thousands of computers or prove that a specific volume of data was extracted. The key distinction is between the attack Rosstat acknowledged and the much broader operation described by the groups.
Why the alleged data matters
The claim about military-loss information has drawn attention because Rosstat stopped publishing an annual cause-of-death breakdown in 2024, according to reporting on the incident.
12 If records were authenticated, their significance would depend on what they contain and how complete and reliably classified they are. The groups’ broad description of the material is not enough to establish that it provides a verified casualty count.
1
The cautious takeaway
The strongest supported account is limited: Rosstat acknowledged attacks over several days, described them as coordinated and carefully prepared, and reported no detected database compromise or leak of legally protected information. The hackers claimed extensive access, data theft and destructive damage, but those claims—including the 23 TB figure—remain unverified by independent confirmation in the available reporting.
18
5
10