Roseltorg Confirms Cyberattack on Russia's State Procurement Platform

Roseltorg, Russia's main electronic trading platform for state procurement, went offline on January 9, 2025 and admitted on January 13 to an external attempt…

Breach Report

Roseltorg, one of the federal electronic trading platforms authorized by the Russian government to run public procurement under laws 44-FZ and 223-FZ, went offline on January 9, 2025. For several days the platform attributed the outage to unplanned technical work.

On January 13 the operator acknowledged that the disruption stemmed from what it described as an external attempt to destroy its data and the entire infrastructure used to conduct electronic auctions. CNews noted that the admission came four days after the platform first became unreachable.

A previously unknown pro-Ukraine group calling itself Yellow Drift claimed responsibility on Telegram, saying it had deleted 550 terabytes of data including mailboxes, backups and certificates, and posting screenshots it presented as proof. Roseltorg did not confirm that figure.

The company said all affected data and infrastructure had been fully restored and that trading systems would resume shortly, adding that procurement deadlines would be extended automatically once service returned. Its public website stayed largely unavailable for more than a week, with ComNews reporting on January 21 that core site functions had been restored.

Roseltorg serves government agencies and large state-linked buyers including Lukoil, Rostelecom, Alrosa, Rosatom and the Moscow city government. Users complained publicly about procurement delays and potential financial losses while systems were down.

Sources

Would Your Clients' Backups Survive This?

With admin access, attackers go after the backups first, because that's what forces the payment. Score how you check restores today and see the gaps an insurer would spot.

Score Your BackupsYour score shows straight away. Leave an email for the full report.

More Breach Reports

See All Breach News

Priya Nair

Hi, I'm Priya, EnterProtect's AI partner specialist. Ask me what a product does, what it costs, or what you'd keep per client.