According to The Record, the website, mobile application, and parcel delivery operations of Russian delivery company CDEK were disrupted for several consecutive days [1]. While the company initially attributed the outage to a major technical failure, the chair of the Russian State Duma's Committee on Information Policy subsequently stated that it was caused by a cyberattack [1]. This entry does not adopt unverified attacker claims regarding encryption or backup deletion, nor does it rely on self-proclaimed group attribution [1].
Russian Courier Service CDEK Halted by Cyberattack
1 min read
- Disclosed
- May 28, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Unknown
- Impact
- Service disruption
- Actor type
- Unknown
- Motivation
- Unknown
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
This entry does not adopt unverified attacker claims regarding encryption or backup deletion, nor does it rely on self-proclaimed group attribution [1].
Timeline
- Public disclosure of incident[1]
Technical details
Source-Supported Details
This entry does not adopt unverified attacker claims regarding encryption or backup deletion, nor does it rely on self-proclaimed group attribution [1].
Source excerpt for verification: "CDEK hasn’t attributed the disruption to a cyberattack, but an anonymous source within the company told Russian media outlet Vedomosti that it was a ransomware attack. Recorded Future News couldn’t verify this claim, as CDEK couldn’t be reached for comment." [1].
References
Media1
- [1]
“CDEK hasn’t attributed the disruption to a cyberattack, but an anonymous source within the company told Russian media outlet Vedomosti that it was a ransomware attack. Recorded Future News couldn’t verify this claim, as CDEK couldn’t be reached for comment.”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.