Ukrainian intelligence hackers hit Gazprom's network infrastructure

The operation reportedly inflicted significant damage on Gazprom’s IT systems, including the destruction of large volumes of databases and the deployment of specialized software on company servers, according to Ukrainian media reports citing intelligence sources.

As a result, around 20,000 Gazprom system administrators lost access to the company’s internal information systems. Ukrainian cyber specialists also reportedly installed software designed to continue erasing Gazprom’s internal data over time.

According to the reports, the cyberattack destroyed:

• Backups of Gazprom’s internal information systems
• Databases from around 390 of Gazprom’s subsidiaries and branches, including Gazprom Teplo Energo, Gazprom Obl Energo, and Gazprom Energosbyt
• Server cluster data from 10 high-performance 1C servers containing Gazprom’s contracts, orders, and documentation
• Data protection and server control systems
• Analytical databases on pipelines, valves, sensors, and pumps, including SCADA systems responsible for managing Gazprom’s technical infrastructure
• Operating systems on accessible servers, with BIOS corruption rendering many servers physically inoperable

“The degradation of Russian information systems to the technological Middle Ages continues,” an intelligence source told Ukrainian media. “We congratulate Russian ‘cyber specialists’ on their latest achievement and recommend replacing their mice and keyboards with hammers and pincers as their new primary tools.”

• Ukraine’s Main Intelligence Directorate (HUR) cyber specialists launched a DDoS attack on the digital infrastructure of Russian energy giants Gazprom and Gazpromneft.