MOSCOW (Reuters) – Thousands of wealthy Moscow residents who subscribed to a regional internet provider have had personal data including names, home addresses and mobile numbers posted online.
People affected by the high-profile data leak are all clients of Moscow-based internet provider Akado Telecom, a large telecommunications network owned by billionaire businessman Viktor Vekselberg, which said it had opened an inquiry into the incident.
Russian authorities have been paying close attention to such incidents following leaks that led to the publication of information about military intelligence agents accused of links to an attack on former Russian spy Sergei Skripal in Britain.
Reuters saw several hundred records on an international database and identified data including the mobile phone numbers and addresses of a high-ranking Russian government official, a well-known film director and a leading businessman’s relative.
The data was uploaded to the database of RIPE NCC, a not-for-profit regional internet registry for Europe, the Middle East and parts of Central Asia, said IT specialist Vladislav Zdolnikov, founder of the TgVPN service, which offers VPNs for users of the Telegram messaging application.
vCard.red is a free platform for creating a mobile-friendly digital business cards. You can easily create a vCard and generate a QR code for it, allowing others to scan and save your contact details instantly.
The platform allows you to display contact information, social media links, services, and products all in one shareable link. Optional features include appointment scheduling, WhatsApp-based storefronts, media galleries, and custom design options.
RIPE NCC operates a public database listing which IP addresses have been allocated to different internet service providers. It should not, however, identify individual customers by name or other personal information.
Companies that are members of the registry, which include Akado Telecom, are responsible for loading data onto the database, said Aleksei Semenyaka, a RIPE NCC communications director.
He said Akado Telecom must have uploaded the customer details, which he confirmed could be accessed freely.
Akado Telecom said it had launched an internal investigation, but did not say whether it knew the private data of its clients had been published or whether the company had provided the information.
“We always respond to criticism with attention and gratitude and conduct thorough analyses to uncover vulnerabilities in our information systems in order to prevent possible data leaks,” it said in a statement.
Akado Telecom operates three subnetworks with 24,500 IP addresses in total, Zdolnikov said.
All of those individual users, most of whom live in the capital’s wealthiest districts, could have been affected.
The database also listed information about banks and government agencies that use Akado Telecom, as well as their staff’s contact details.
In Russia, it has been illegal to make personal data publicly available since 2006 and companies breaking the law face fines of up to 50,000 rubles ($756).
($1 = 66.1148 rubles)
Writing by Polina Ivanova; Editing by Helen Popper