Threat actor claims leak of 1.5M FSB border service records
A threat actor claims to hold about 1.5 million records from Russia's FSB Border Service, with full names, years of birth and passport data, covering border crossings from January to September 1, 2026. No price, forum link, or Russian government statement exists. DailyDarkWeb labels the claim unverified and notes the set could be a repackaged or partial copy of the 'Kordon' border-crossing database (2014–2023), circulating on forums since 2024, rather than a fresh intrusion.
What happened
A threat actor claims to hold about 1.5 million records from Russia's FSB Border Service, with full names, years of birth, passport data, and border crossings from January to September 1, 2026. No price or forum link was given, and Russian authorities have made no statement. The report comes from the DailyDarkWeb channel, which labels the claim unverified.
Why it matters
If genuine, travelers who crossed the Russian border in the period would face identity fraud and surveillance risk, including foreign nationals. According to DailyDarkWeb, the offer may be a repackaging of a larger 'Kordon' database (2014–2023) already circulated since 2024, weakening the case for a fresh intrusion. Without official confirmation, the risk remains speculative.
What to do
Monitor leak forums and channels for pricing, samples, or independent confirmation before any decision. Check whether staff or executives who traveled to Russia in the period appear in exposed data, and strengthen alerts against misuse of passport details. Do not act on the claim alone.
For the technical team
- Affected
- Serviço de Fronteira do FSB, agência de segurança federal da Rússia; base alegada de travessias de fronteira de 2026 · Claimed database of the FSB Border Service, Russia's federal security agency: border crossings from January to September 1, 2026.
- Exploitation
- Unverified threat-actor claim reported by DailyDarkWeb. No price or forum link disclosed and no statement from Russian authorities. DailyDarkWeb states the claim is not confirmation of a new FSB breach.
- Fix
- No software to update
- More details
- Claimed fields: full names, years of birth, passport data, border-crossing dates and times. DailyDarkWeb notes the much larger 'Kordon' border-crossing database (2014–2023) has circulated on forums since 2024, so this set could be a repackaged or partial copy. If genuine, passport and travel records would carry surveillance and fraud risk for travelers, including foreign nationals.
Timeline
First report: threat actor claims leak of FSB border-crossing records.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
