The number of database leaks from Russian companies decreased by 40%

In January-September 2026, cybercriminals published 119 databases of Russian companies. This is 40% less than a year ago, when 198 such publications were made, F6, a Russian developer of technologies to combat cyber threats, told RBC.

The total volume of published data decreased by 12% compared to the same period in 2025. In the third quarter, analysts recorded 29 new cases of publication of databases of Russian companies and organizations. A year earlier, there were 35 such cases. The volume of new publications for the quarter exceeded 170 million lines, which is 58% less than in the third quarter of 2025 (409 million lines).

In the open access most often got the name, address of residence, passwords, date of birth, passport data, mobile phone numbers and email addresses.

The leaders in the number of leaks that got into public access in the third quarter were companies from the field of IT, retail and Internet commerce, as well as government organizations. A year ago, the top three were retail and online stores, the public sector, as well as educational platforms and institutions.

F6 attributes the decline in the number of publications to the lower activity of underground Telegram channels specializing in leaks, the unstable operation of many forums and the complete closure of some sites. In addition, a number of popular shadow resources were forbidden to publish data related to organizations from Russia and CIS countries.

The main trend of the quarter analysts called the emergence of many publications previously private databases, which for a long time turned in a large number of sellers and previously were not put into open access.

In August, the RKN reported that over the past year and a half, Russian companies were fined a total of 2.6 million rubles for leaks of personal data.