CDEK

CDEK Express, also known as CDEK, is a Russian delivery service that provides parcel shipment and logistics solutions to customers within the country. The company maintains a website and a mobile application through which users can book, track, and manage their deliveries. As a major player in Russia's courier sector, it handles a substantial volume of shipments for both individual and business clients.

In May 2020, a data breach exposed the personal information of approximately nine million of CDEK's customers, with the dataset offered for sale online. This incident represents one of the largest known personal data leaks within Russia's delivery services sector, indicating a sizable user base for the company. Although the firm denied responsibility for the breach, the event highlighted the scale of data it holds on its clientele.

In May 2024, CDEK experienced a multi‑day operational disruption after a ransomware attack by the hacker group Head Mare, which encrypted servers and destroyed backups. The company initially described the outage as a technical failure but later acknowledged, both internally and by government sources, that a cyberattack had occurred. Head Mare criticized CDEK's security measures and service quality, and the attack led to suspended parcel shipments, website and mobile app malfunctions, and widespread delivery delays that caused financial losses for some customers. While restoring operations, CDEK assured users that the safety of their parcels remained unaffected.

The available sources do not specify CDEK's ownership structure, parent company, or subsidiary relationships. Consequently, no further structural details can be provided based on the information at hand.