GUR Cyber Strike On Gazprom: Details Of The Attack On Russia's Strategic Monopoly Have Emerged

• 19.07.2025, 12:38

The scale of the consequences is impressive.

Intelligence has launched a cyber strike on the information infrastructure of Gazprom Corporation. As a result, critical data on supplies, contracts, finances and facilities management was destroyed.

According to RBC-Ukraine, citing sources.

The Main Intelligence Directorate has carried out a large-scale cyber operation against Russian gas monopoly Gazprom.

According to RBC-Ukraine sources, the attack has caused deep disruptions in the company's systems and may lead to emergency operation, complications in gas transportation and serious financial consequences.

A Ukrainian specialists managed to penetrate all levels of Gazprom's information infrastructure, according to an interlocutor in the GSD.

As a result, data on contracts, delivery schedules, tariffs, financial statements, as well as records of taxes, payments and legal obligations were completely destroyed.

In addition, technical documentation of pressure management systems, gas and oil balances (SCADA and GIS), data on wells and the pipeline network were erased.

The operation covered dozens of critical platforms, including internal analytics, management servers, administration and security systems.

Full Access to Systems

GSD gained full access to 1C server clusters, databases of more than 390 subsidiaries, and extracted more than 20,000 user profiles along with their digital signatures.

They gained access to systems that support the technical operation of Gazprom's infrastructure (pipes, valves, sensors, etc.), as well as to Gazprom's auxiliary systems - data protection, server control, administration, and more.

Secretly downloaded data of automated control systems and data of 1C server clusters together with all files (contracts, orders, decrees) of Gazprom Corporation and subsidiaries.

The unique software was used to delete all data of Gazprom Corporation's information system stored on physical servers and cloud platforms, including backups.

Reminder, on July 17, the cyber corps of the Main Intelligence Directorate (GUR) attacked Gazprom's network infrastructure. It is involved in ensuring the armed aggression of the Russian Federation (RF) against Ukraine.