Sources in Ukraine's Defence Intelligence directorate (HUR) said its cyber specialists carried out a destructive attack on RegionTransService LLC, a Russian company that services and manages freight rail wagons, on January 4, 2025.
According to those sources, the operation destroyed the company's servers, disabled its workstations and erased its backups. The figures given to Ukrainian media were 78 servers and 211 workstations. RegionTransService provides services across the working life of a freight wagon and supports the operations of Russian Railways, which Ukrainian officials cited as the reason for targeting it, describing the firm as part of the chain that moves military cargo.
Ukrinform and RBC-Ukraine both reported the claim on the day of the attack, each citing unnamed intelligence sources, and both noted that it coincided with the birthday of HUR chief Kyrylo Budanov. Ukrainian reporting presented the timing as deliberate.
As of the reporting date, neither RegionTransService nor Russian state bodies had publicly acknowledged an incident or commented on the extent of any damage. The account rests entirely on Ukrainian intelligence sources relayed through Ukrainian outlets, and the scale of disruption has not been independently verified.