Russian security officials’ data leaked onto dark web

Personal information belonging to Russian law enforcement and security personnel has surfaced online following a reported data breach involving fitness chain DDX Fitness, Baza Telegram channel reports.

The leaked database contains personal information of people who visited DDX facilities, including photographs, phone numbers, surnames and records of their visits.

“Among the visitors who apparently have ties to the DDX Fitness chain were representatives of various security and law enforcement agencies — their photographs, phone numbers, surnames and even dates of visits,” Baza noted.

The channel said the disclosure could carry criminal consequences if the leaked material includes information identifying active intelligence or security service personnel. Any potential liability would depend on the nature of the information disclosed and the circumstances surrounding the leak, it added.

Reports that DDX may have been targeted by hackers emerged a day earlier. Baza said photographs, personal information and so-called mugshots of people who had visited the fitness chain had appeared on the dark web.

The reported breach has raised concerns over the exposure of sensitive personal information belonging to customers, including individuals working in law enforcement and security agencies.

DDX said it was investigating reports of a possible customer data leak. The company also said it had strengthened its information security measures and carried out unscheduled measures to protect its information systems and databases.

By Vafa Guliyeva