INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Belarusian hacktivists breach Russian state healthcare network via cyberattack

| 2026-10-09 14:40 MEDIUM LOW DATA BREACH CRITICAL INFRASTRUCTURE & OT DDOS & DISRUPTION
JSON
Executive Summary
AI-generated
In 2023, Belarusian hacktivists known as the Cyber Partisans claimed responsibility for breaching Moscow's healthcare network, gaining administrator-level access to its infrastructure and systems connected to other government agencies. The group spent months inside the network before abandoning it due to lack of priority from their end. Currently, they claim to have access to hundreds of IT systems across Russia and Belarus. According to a recent report by Russian cybersecurity firm Solar, the hackers accessed sensitive medical information but did not disrupt operations or destroy data. The Cyber Partisans stated that this breach could help them assess Russian military casualties in the war in Ukraine, although details on what specific information they obtained are unknown.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
NORTH_AMERICA NORTH_AMERICA CIS CIS healthhealth governmentgovernment
Incident Timeline
‎early 2024
Solar discovered the breach in December 2025, tracing it back to early 2024.
malware Solar
Solar said it discovered the breach in December 2025 and traced the earliest signs of the intrusion to early 2024, suggesting the hackers may have remained inside the network for nearly two years.
‎December 2025
The Cyber Partisans, a Belarusian hacktivists group, admitted to breaching the Russian state healthcare network in 2023.
malware Solar
Solar said it discovered the breach in December 2025 and traced the earliest signs of the intrusion to early 2024, suggesting the hackers may have remained inside the network for nearly two years.
organisation Supreme Court
In July, Russia's Supreme Court designated the Cyber Partisans an “ extremist organization ,” accusing the group of seeking to destabilize Russia and Belarus and overthrow Lukashenko's government.
organisation The Cyber Partisans
The Cyber Partisans said they had gained access a year earlier and had not attempted to maintain it after completing their objectives.
“We take this opportunity to acknowledge responsibility for the hack and agree with the report's authors on at least one point: No matter how hard the Russians try to defend their systems, the Cyber Partisans ‘find and will continue to find ways around’ their security measures,” the hackers said in a statement.
‎2026/10/02
The Cyber Partisans' group admitted to a 2023 breach of a Russian state healthcare network.
source_region Russian Federation
The Cyber Partisans' statement follows a report published last week by Russian cybersecurity firm Solar, a subsidiary of state-controlled telecom giant Rostelecom, which identified the group as the likely perpetrator of a long-running intrusion into an unnamed Russian healthcare organization.
organisation The Cyber Partisans'
The Cyber Partisans' statement follows a report published last week by Russian cybersecurity firm Solar, a subsidiary of state-controlled telecom giant Rostelecom, which identified the group as the likely perpetrator of a long-running intrusion into an unnamed Russian healthcare organization.
malware Solar
The Cyber Partisans' statement follows a report published last week by Russian cybersecurity firm Solar, a subsidiary of state-controlled telecom giant Rostelecom, which identified the group as the likely perpetrator of a long-running intrusion into an unnamed Russian healthcare organization.
organisation Rostelecom
The Cyber Partisans' statement follows a report published last week by Russian cybersecurity firm Solar, a subsidiary of state-controlled telecom giant Rostelecom, which identified the group as the likely perpetrator of a long-running intrusion into an unnamed Russian healthcare organization.
‎2026/10/09
Belarusian hacktivists, known as the Belarusian Cyber Partisans, admitted to infiltrating Moscow's healthcare network in 2023.
organisation Recorded Future News
"The network was not a priority for us, so we did not maintain our access," the group said in a comment to Recorded Future News.
organisation the Moscow Department of Health
In a statement on Friday, the Belarusian Cyber Partisans said they infiltrated the Moscow Department of Health in 2023 and obtained administrator-level access to its infrastructure, including systems connected to other government agencies.
Intelligence Sources
TheRecord 2026-10-09