Cyber Incident Victim: Far Eastern scientific research centre of space hydrometeorology 'Planet'
Date:
Jan 2024
Location:
Russia
Summary
Ukrainian Military Intelligence cyber operations disrupted Russian military capabilities through targeted attacks on critical systems. Hackers compromised drone control programs, disabling server-dependent functions like identification systems, video streaming, and computer-based controls, forcing manual drone operation. A prior operation destroyed 280 servers and erased 2 petabytes of satellite data at a key Russian hydrometeorology research center, causing an estimated $10 million in losses and disrupting military satellite services for over 50 state entities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
In January 2024, Ukrainian Military Intelligence (HUR) executed a cyber operation against the Far Eastern scientific research centre of space hydrometeorology “Planet,” a Russian federal-level state enterprise responsible for receiving and processing military satellite data. Cyber volunteers from the BO Team group conducted the attack, which destroyed 280 servers and caused the loss of approximately 2 petabytes (2 million gigabytes) of data. The targeted center provided essential satellite data products to over 50 Russian state entities, with the military being its primary consumer. The attack resulted in the irreversible destruction of a digital array valued by Russian authorities at a minimum of $10 million. This operation represented a significant degradation of Russia’s space-based hydrometeorological and military satellite data processing capabilities.
The destruction of servers and data impaired the center’s ability to deliver critical intelligence products derived from satellite observations to Russian military and governmental end-users. The incident disrupted the operational workflow for converting raw satellite data into actionable meteorological and Earth observation intelligence. No recovery timeline or restoration efforts were disclosed in available reporting. The attack occurred amid broader Ukrainian cyber operations against Russian military infrastructure, including a subsequent February 2024 HUR operation that compromised drone control systems. The “Planet” center’s role in supporting military satellite data interpretation established it as a strategic target for degradation. Financial losses were confined to the destroyed infrastructure and data assets, with no ancillary costs or secondary impacts detailed in source material.