Specialists from JSC Budushchee (F6) analyzed database leaks involving Russian companies throughout 2025 and the first half of 2026. The study identified 326 such incidents, which is nearly double the combined total of 164 cases recorded across Latin America, the Middle East, Africa, the Asia-Pacific region, and other CIS countries.
The leaked databases contained a total of 1.175 billion rows of information related to Russian citizens. Experts attribute the high frequency of these incidents to increased cyberattacks on businesses and government organizations during the current geopolitical conflict, aimed at data theft and causing maximum damage.
Excluding Russia, Latin America accounted for 33% of global leak incidents, followed by the Middle East and Africa at 29%, the Asia-Pacific region at 8%, and other CIS countries at 4%. CIS nations saw the highest total volume of leaked data rows, with Central Asia accounting for over one-third of the global total.
Specifically, Tajikistan accounted for 217 million rows, Kazakhstan for 25 million, and Uzbekistan for 15 million. Despite a observed decline in the number of published databases from Russian firms in the first half of 2026, the intensity of cyberattacks against domestic organizations remains at a high level.
Authorities are currently working on updating anti-fraud legislation and enforcement practices to reduce the likelihood of such incidents. Experts suggest that the high volume of leaks in Russia is linked to the country's extensive digital ecosystem, which generates massive amounts of personal data across various services.
