Ukrainian intelligence hacks Gazprom: Massive data destruction and network disruption

As a result of the cyberattack, serious damage was inflicted on Gazprom's network infrastructure, in particular, a large amount of databases was destroyed and special software was installed.

During the operation:

• access to Gazprom’s information system was disabled for about 20,000 system administrators;

• software was installed on the company's servers, which will continue to destroy Gazprom’s data.

Photo: HUR hackers dealt a serious blow to "Gazprom" (sources of RBC-Ukraine)

In addition, the following were destroyed:

• backup copies of Gazprom’s information system data;

• databases of about 390 Gazprom subsidiaries and its branches, including Gazprom Teplo Energo, Gazprom Obl Energo, Gazprom Energozbyt, and hundreds of others;

• data from 1C server clusters (10 servers of extremely high capacity), together with all files (contracts, orders, directives) of Gazprom and its subsidiaries;

• data of auxiliary systems (data protection, server control, administration, and much more);

• databases of pipeline, valve, sensor, pump, and other analytics systems. Servers with analytics of SCADA systems responsible for managing technical infrastructure were deleted;

• operating systems on available servers and BIOS were damaged (servers do not turn on and will require physical intervention to restore operation).

Cyberattacks against Russia

Since the beginning of the full-scale war against Ukraine, Russia itself has become the target of numerous cyberattacks. Hacktivists, international groups, and individual specialists have regularly attacked government websites, media, financial institutions, and Russia’s energy infrastructure, disabling them or leaking sensitive information.

In particular, hackers of Ukrainian intelligence regularly carry out cyberattacks against the terrorist country. Recently, they attacked the company Gaskar Integration, which is one of the largest suppliers of drones for the Russian army.