Утечки персональных данных в России стали реже, но крупнее: что говорят в Роскомнадзоре и в F.A.С.С.T.

Criminals are very interested in the full names, passport details, passwords, home addresses, and places of work of Russians

The most common data leaks in Russia are recorded in the field of trade and services — this data is provided by IA "TASS", referring to the press service of Roskomnadzor. According to the agency, the number of leaks recorded by it has decreased: 110 cases in 9 months of 2024 against 145 cases in 9 months of 2023.

It is possible to minimize the consequences of possible leaks of personal information for Russians. According to Roskomnadzor, this requires giving operators clear instructions for complying with the principles of personal data processing.

One of the key principles sounds today as follows: "the personal data being processed must not be excessive in relation to the stated purposes of their processing." We believe that it is necessary to act through sectoral legislation, by developing mandatory standards for working with data. Together with the relevant departments, it is necessary to formulate what specific set of data is really the minimum necessary to achieve certain goals, what are the features of work in each specific case.
Press service of Roskomnadzor

It is also necessary to exclude the collection of data by operators based on consent from citizens, and "move to data processing by virtue of law, or on the basis of a contract, the terms of which, in terms of the volume and duration of data processing, should be limited by the aforementioned standards"

Hackers have started to strike less often, but at the same time, it seems, information leaks have become more powerful. As evidenced by the statistics of cybersecurity specialists from F.A.С.С.T., in the nine months of 2024, 210 databases with data of clients of Russian companies were published on underground Internet forums and in thematic Telegram channels. This is more than in the same period of 2023 by 37.25%: then only 153 databases were leaked. At the same time, the number of compromised records in 2024 increased by 7.76%: to 250.5 million lines.

F.A.С.С.T. notes that databases with users' phone numbers, full names, dates of birth, passport details, email addresses, residential and work addresses, passwords, and IP addresses are in demand on the black market among attackers.

Read materials on the topic:

Russian companies are attacked by hackers Narketing163 under the guise of partnership offers

Russia wants to ban anonymous mass spam calls

Maximum security: Russian TrustPhone smartphone on Android and "Aurora" presented