Cyber Incident Victim: Polar Branch of the Russian Federal Research Institute of Fisheries and Oceanography
Date:
May 2022
Location:
Russia
Summary
A cyberattack attributed to the Anonymous collective resulted in a significant data breach at the Polar Branch of the Russian Federal Research Institute of Fisheries and Oceanography (ПИНРО), involving the leak of 466 gigabytes of internal emails. The stolen data was disseminated through the DDoSecrets platform as part of the broader #OpRussia campaign, highlighting the institute's compromise during heightened cyber operations targeting Russian entities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On or around May 11, 2022, the hacktivist group Anonymous publicly claimed responsibility for a cyberattack against the Polar Branch of the Russian Federal Research Institute of Fisheries and Oceanography (ПИНРО/PINRO). The group exfiltrated and leaked 466 gigabytes of internal email communications from the institute’s systems. Anonymous coordinated the release of the data through the transparency collective Distributed Denial of Secrets (DDoSecrets), which facilitated public access to the stolen information. The breach was announced via social media channels associated with Anonymous operations, specifically under the hashtag #OpRussia, indicating alignment with their broader campaign targeting Russian entities following the escalation of hostilities in Ukraine. No technical details regarding the initial attack vector, duration of network access, or specific methods of data extraction were disclosed in the public claim.
The leaked email dataset represented a significant compromise of institutional communications at a Russian federal research organization specializing in fisheries and Arctic Oceanography. While the precise content of the emails was not detailed in the breach announcement, the volume of data suggested extensive exposure of operational, scientific, and potentially administrative correspondence. The incident underscored the targeting of scientific institutions within geopolitical cyber campaigns, with ПИНРО joining other Russian entities subjected to data theft and leaks under #OpRussia. No statements from ПИНРО or Russian authorities acknowledging the breach or detailing containment measures, forensic investigations, or recovery efforts were referenced in the source material. The leak added to a series of high-volume data exposures attributed to Anonymous during this period, emphasizing disruptive impacts on targeted organizations through reputational damage and operational transparency.