CDEK
HighThe alleged breach at CDEK in March 2022 exposed over 19 million user records containing email addresses, names, and phone numbers.
- Records exposed
- 19,218,203 records
- Breach date
- Breach Mar 9, 2022
- Last update
- Updated Mar 17, 2022
What data was exposed?
Fields reported as compromised in this breach record.
Why does this breach matter?
In-depth analysis of the breach and its implications.
In early March 2022, the Russian courier service CDEK experienced a data breach allegedly carried out by the group IT Army, resulting in the exposure of over 19 million email addresses, along with associated names and phone numbers. The leaked dataset, totaling over 30GB of data, was part of an attack aimed at de-anonymizing Russian users. The breach remains unverified, as independent confirmation of the data's authenticity has not been secured.
Impact Analysis
Understanding the scope and consequences of this breach.
- User Impact
- Users may experience unsolicited communications or targeted phishing attacks.
- Business Impact
- The organization's reputation and customer trust may have been negatively affected.
- Affected Sectors
- Logistics
- Retail
- Consumer Services
- Geographic Impact
- Russia
- Global
What You Should Do
Recommended actions to take in response to this breach.
If You Were Affected
- •Enable multi-factor authentication (MFA) for all accounts.
- •Be cautious of unsolicited messages or calls.
- •Check email addresses via trusted breach-notification services.
Preventive Measures
- •Practice strong password hygiene.
- •Use secure and unique passwords for different services.
- •Be cautious with sharing personal information online.
Frequently Asked Questions
Common questions about this breach and what it means for you.