---
title: "Silent Crow claims hack of Rosstat: hackers download 23 TB of data, including information on Russian losses"
description: "Hackers from the Silent Crow movement have claimed to hack Rosstat's IT infrastructure and download 23 TB of data, including statistical databases and information on Russian army losses in the war."
date: 2026-11-01T17:34:01.290Z
lang: en
url: https://xab.info/en/posts/silent-crow-claims-hack-rosstat-data
tags: [silent-crow, rosstat, cyberattack, data-breach, russia-ukraine-war, hacking]
author: "Alexander Buran"
publisher: "XAB.info"
---

# Silent Crow claims hack of Rosstat: hackers download 23 TB of data, including information on Russian losses

![Hacker in a white mask and black hoodie working at a computer in a blue-lit room](https://xab.info/media/2026/11/01/silent-crow-vz-rosstat-vygruzka-dannyh/silent-crow-vz-rosstat-vygruzka-dannyh-1.webp)

## Key Points

- Silent Crow claims compromise of Rosstat's central office, regional divisions, and Main Interregional Data Processing Center
- According to the hackers, about 23 TB of data was downloaded, including statistical, economic, and personal databases
- Domain controllers and virtualization systems ZVIRT, oVirt, VMware ESXi were compromised
- Affected systems include ESSO, AS GS OFSP, 'Demography', TSOD, SUR, FPSR, NSUD
- Rosstat at the time of publication has neither confirmed nor denied the hackers' statements

The cyber-partisan movement Silent Crow has announced a large-scale operation against the internal IT infrastructure of Rosstat. According to the hackers' statement published in their Telegram channel and reported by RBC-Ukraine, the attack compromised the operations of the agency's central office, its regional branches, and the Main Interregional Center for Processing and Disseminating Statistical Information. The total volume of downloaded data, according to the operation's participants, amounted to about 23 terabytes.

### Scale of compromise: from domain controllers to virtualization systems

According to details revealed in the Silent Crow statement, the movement's specialists gained access to Rosstat's domain controllers, which generally means obtaining privileged management rights across the entire corporate network. In addition, virtualization and infrastructure management systems were compromised, specifically the ZVIRT, oVirt, and VMware ESXi platforms. This level of access allows malicious actors not only to read but also to modify data, as well as move through the internal network undetected.

### Critical departmental information systems affected

The list of compromised critical information systems named by the hackers includes ESSO, AS GS OFSP, "Demography", TSOD, SUR, FPSR, and NSUD. These systems ensure the maintenance of state statistics, processing of census data, generation of reporting and analytical products of Rosstat. According to Silent Crow, the downloaded arrays include databases with statistical, economic, and personal information, census materials, as well as information concerning the military losses of the Russian Federation in the war against Ukraine.

### Context: disputed estimates of Russian army losses

The hackers' statement about access to data on Russian losses came amid ongoing discussions surrounding the real scale of the Russian army's casualties. According to calculations by The Economist, since the beginning of the full-scale invasion of Ukraine, Russia's total losses in killed and wounded may exceed two million people, of whom 374 to 770 thousand are dead alone. Analysts and intelligence sources note that in October 2026, the Russian army's losses reached a record level for the entire conflict, while the Ukrainian Defense Forces in the same period regained more territory than Russia was able to seize.

### Verification and legal consequences

At the time of publication, Rosstat has not published an official comment regarding Silent Crow's statements. Independent verification of the volume and authenticity of the downloaded data has not been carried out at this time. Cybersecurity experts recall that statements by hacker groups often contain elements of information warfare and may exaggerate the actual scale of compromise. Nevertheless, the very fact of a public statement detailing the affected systems and platforms indicates that the operation, at least at the level of statements, was targeted and affected multiple levels of the state agency's infrastructure.

## Fact-Check & Sources

- [Хакеры сломали Росстат и забрали подлинные данные о потерях РФ в войне](https://www.rbc.ua/ukr/news/hakeri-zlamali-rosstat-ta-zabrali-spravzhni-1793550350.html) - RBC-Ukraine retells the statement of the Silent Crow Telegram channel. The very fact of the publication of the statement by the hackers is confirmed; the volume and nature of the compromise are based solely on the hackers' words without independent verification.

## FAQ

### What exactly does the Silent Crow movement claim about the Rosstat hack?

The hackers claim to have gained access to domain controllers, virtualization systems (ZVIRT, oVirt, VMware ESXi), and a number of critical Rosstat information systems, downloading about 23 TB of data.

### Has Rosstat confirmed the fact of the hack?

At the time of publication, Rosstat has not published an official comment either confirming or denying the hackers' statements.

### What data, according to the hackers, was downloaded?

Silent Crow names statistical, economic, and personal databases, census materials, and information on Russian military losses. Independent verification of these claims has not been conducted.

### What estimates of Russian army losses are given in context?

The Economist estimates Russia's total losses in killed and wounded at over 2 million people, of which 374–770 thousand are dead. This data is provided as context and is not part of the hackers' statement.