Telegram Bots Start Buying Leaked Russian Databases

Telegram bots created for data "probiv" have begun buying leaked databases of Russian personal data even before they are published on the darknet. Ashot Oganesyan, founder of the DLBI leak intelligence service, told Vedomosti about this: in the first nine months of 2025, at least 20–25 leaks were purchased on exclusive terms for further retail resale - a phenomenon that had not been recorded before.

We are talking about databases with detailed information about purchases, financial transactions, as well as ownership of cars and real estate. Attackers can use this data for targeted fraud, social engineering, and for sale at the request of specific clients. According to Oganesyan, transferring leaked information from free access to a commodity increases its commercial value and complicates the work of law enforcement officers.

Experts confirm that the demand for premium data is high. Andrey Arsentiev, Head of Analytics and Special Projects at the Infowatch EAC, notes that accounts of top managers and system administrators are especially in demand - they provide access to corporate systems and a large amount of confidential information.

At the same time, Alexey Kozlov, a leading analyst at Spikatel, points to a decrease in the number of leaks compared to last year. He attributes this to the blocking of data distributors in Telegram and the introduction of turnover fines for companies that have allowed leaks.

Read more materials on the topic:

• The Ministry of Internal Affairs discovered 35 cases of data leaks in six months
• Cyberpolice reminded of the "golden hour" after a data leak in Russia
• Data leaks in Russia: logistics under the gun of cybercriminals