---
title: "Operation \"Poseidon\": Ukrainian Hackers Claim to Have Stolen the Design Base of the Russian Fleet — 70 Ship and Submarine Projects"
description: "Ukrainian hackers have announced the completion of Operation \"Poseidon\": according to their data, the design base of 70 Russian ship and submarine projects, bearing \"top secret\" markings, has been stolen. The information has not yet been independently confirmed."
date: 2026-09-21T07:22:00.000Z
lang: en
url: https://xab.info/en/posts/operation-poseidon-ukrainian-hackers-stole-russian-fleet-design-base
tags: [cyber-operation, poseidon, ukraine-hackers, russian-navy, military-secrets, data-breach, naval-technology]
publisher: "XAB.info"
---

# Operation "Poseidon": Ukrainian Hackers Claim to Have Stolen the Design Base of the Russian Fleet — 70 Ship and Submarine Projects

![Hacker in a hood and skull mask against neon digital data — symbol of the Poseidon cyber operation by Ukrainian hackers who stole the Russian fleet's design database](https://xab.info/media/2026/09/21/operatsiya-poseidon-ukrainskie-hakery-pohitili-konstruktorskuyu-bazu-flota-rf/operatsiya-poseidon-ukrainskie-hakery-pohitili-konstruktorskuyu-bazu-flota-rf-1.webp)

## 🎯 Key Points

- Ukrainian hackers claim to have stolen the design base of 70 Russian ship and submarine projects during Operation "Poseidon"
- The dataset includes technical specifications, schematics, algorithms, and mathematical support for the "Symphony," "Kasatka," "Andromeda," and other systems
- Some of the documents carry "secret" and "top secret" classification markings
- The information is based on a statement by the Ukrainian Militant Telegram channel, published by RBC-Ukraine; independent confirmation is absent

Ukrainian cyber specialists have reported the completion of a large-scale operation under the codename "Poseidon," during which, they claim, Russia's scientific and industrial base for naval purposes was fully compromised. This was reported on September 21, 2026, by RBC-Ukraine, citing the Ukrainian Militant Telegram channel. According to the hackers, the targets included leading Russian scientific organizations, design bureaus, and factories directly involved in developing weapons and combat systems for the fleet. The operation, its participants claim, has become one of the most successful in the history of Ukrainian cyber resistance.

### Scale of the Stolen Data: 70 Projects from the "Varshavyanka" to New Corvettes

According to screenshots published by Ukrainian Militant, the hackers obtained the complete design base covering 70 projects of ships, vessels, and submarines. The list includes both long-known classes of warships and the latest developments, including corvette projects and modernized versions of surface and underwater units. The hackers emphasize that this is not a case of fragmented leaks, but a systematic capture of an archive that allows the full development cycle to be reconstructed, from the initial technical specification to serial production.

### Technical Arsenal: From Tactical-Technical Tasks to Mathematical Support

According to the operation's participants, the obtained dataset includes a comprehensive technical arsenal for each project: tactical-technical tasks, technical specifications, operating manuals, structural and electrical schematics, as well as algorithms and mathematical support for onboard systems. According to experts in military-technical intelligence, such a set of documents not only makes it possible to understand the operating principles of specific systems, but also to reproduce key elements of their architecture. Particular interest is drawn by materials on Russian military testing, which, according to the screenshots, were also captured.

### Promising Systems: "Kasatka," "Andromeda," and Others

Among the stolen materials, the hackers highlight the "Symphony," "Chardash," "KAMA-NS-VK," "Sprut-N1," "Pritliv" (Tide) complexes and the 14Ts217 system. A separate block is made up of promising developments: "Kasatka," "Vetr" (Wind), "Bering," "Dirizher" (Conductor), "Poligon" (Range), "Andromeda," and "Sigal-M." The appearance of publicly available information on projects that had not previously appeared in open sources indicates that the targeted organizations were working at a stage preceding state acceptance or public announcement.

### Classification Markings and Significance for the Intelligence Balance

According to the hackers, the operation's significance is further enhanced by the fact that most of the stolen documents carry high restrictive classification markings. The dataset includes materials marked "secret" and "top secret," as well as internal requirements for countering foreign technical intelligence. If this information is confirmed, it means that documents whose access within the Russian information protection system is limited to a narrow circle of personnel with appropriate clearances have fallen into the hands of a third-party actor.

### Contradictory Data

As of the time of publication, all information about Operation "Poseidon" comes from a single channel — the Ukrainian Militant Telegram account, which RBC-Ukraine cites. Independent confirmation from official Ukrainian or Western structures, as well as a reaction from the Russian Ministry of Defense or the FSB, has not been recorded as of the preparation of this material. The Russian side traditionally does not comment on such statements or refutes them in a generalized manner. Thus, the specific figures (70 projects), the list of systems, and the classification markings have not yet been verified by a second independent source. The Ukrainian side positions the operation as completed and successful; however, the public display of screenshots does not allow for a full assessment of the volume and authenticity of the stolen archives.

In any case, even with partial confirmation, Operation "Poseidon" demonstrates a persistent trend: cyberspace is becoming a field where military-technical parity is determined not only at shipyards and test ranges, but also in the server rooms of design bureaus. For Kyiv, this is a tool of asymmetric pressure; for Moscow, it is a signal of the need to review the protection architecture of closed industrial data.

## 🔍 Fact-Check Verification

- [Operation "Poseidon": Ukrainian hackers stole the secret developments of the Russian fleet](https://www.rbc.ua/ukr/news/operatsiya-poseydon-ukrayinski-hakeri-vikrali-1789974846.html) - РБК-Украина публикует заявление Ukrainian Militant (Telegram) о похищении 70 проектов. Скриншоты приложены. Независимая верификация объёма и подлинности документов отсутствует. Реакция РФ не зафиксирована.

## ❓ FAQ

### Q: What is Operation "Poseidon"?
**A:** According to Ukrainian Militant, it is a cyber operation by Ukrainian hackers during which, it is claimed, Russia's scientific and industrial base for naval purposes was compromised. The specific start and end dates of the operation are not indicated in the published materials.

### Q: How many ship projects fell into the hackers' hands?
**A:** According to Ukrainian Militant, the stolen dataset includes 70 projects of ships, vessels, and submarines. Independent verification of this figure has not been conducted as of the time of publication.

### Q: Which specific systems are mentioned in the stolen documents?
**A:** The hackers name the "Symphony," "Chardash," "KAMA-NS-VK," "Sprut-N1," "Pritliv" (Tide) complexes and the 14Ts217 system, as well as the promising developments "Kasatka," "Vetr" (Wind), "Bering," "Dirizher" (Conductor), "Poligon" (Range), "Andromeda," and "Sigal-M."

### Q: Has the information been confirmed by independent sources?
**A:** As of the time of publication, all information is based on a statement by the Ukrainian Militant Telegram channel, as reported by RBC-Ukraine. Neither official Ukrainian structures, nor Western partners, nor the Russian side have provided independent confirmation or refutation.

### Q: What classification markings do the stolen documents carry?
**A:** According to the hackers, most of the documents bear "secret" and "top secret" markings, as well as internal requirements for countering foreign technical intelligence. The authenticity of the markings in the screenshots has not been independently verified.