Tupolev

The Defense Intelligence of Ukraine reportedly hacked the servers of Tupolev, exfiltrating over 4.4GB of data including official correspondence, personal data of employees, engineer résumés, purchase records, residential addresses, and minutes from closed-door meetings. The attackers also defaced the Russian aircraft builder's website. This attack, which includes the leak of internal employee data, is significant and could have long-term implications for the company's security and operations.

Source: https://www.theregister.com/2025/06/04/ukraine_hack_attack_russia/

TPRM report: https://scoringcyber.rankiteo.com/company/tupolev-psc-tupl-

"id": "tup418060625",
"linkid": "tupolev-psc-tupl-",
"type": "Cyber Attack",
"date": "6/2025",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Aerospace and Defense',
                        'location': 'Russia',
                        'name': 'Tupolev',
                        'type': 'Aircraft Manufacturer'}],
 'attack_vector': 'Hacking, Data Exfiltration',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Official Correspondence',
                                              'Personal Data of Employees',
                                              'Engineer Résumés',
                                              'Purchase Records',
                                              'Residential Addresses',
                                              'Minutes from Closed-door '
                                              'Meetings']},
 'description': 'Ukrainian military intelligence hacked the servers of '
                "Tupolev, the Kremlin's strategic bomber maker, exfiltrating "
                'over 4.4GB of data and defacing the website.',
 'impact': {'brand_reputation_impact': 'Negative',
            'data_compromised': ['Official Correspondence',
                                 'Personal Data of Employees',
                                 'Engineer Résumés',
                                 'Purchase Records',
                                 'Residential Addresses',
                                 'Minutes from Closed-door Meetings'],
            'operational_impact': 'Website Defacement, Potential Strategic '
                                  'Intelligence Loss',
            'systems_affected': 'Tupolev Servers, Tupolev Website'},
 'motivation': 'Intelligence Gathering, Strategic Disruption',
 'references': [{'source': 'Local media reports'}],
 'response': {'recovery_measures': 'Website Redirect to United Aircraft '
                                   'Corporation (UAC) Page'},
 'threat_actor': 'Defense Intelligence of Ukraine',
 'title': 'Ukrainian Hack on Tupolev Servers',
 'type': 'Data Breach, Website Defacement'}