Russia’s Illicit Data Market: A Deep Dive

In recent years, Russia has been grappling with the complexities of its extensive underground market for leaked personal data. This covert ecosystem, long manipulated by investigative journalists, law enforcement, and criminal enterprises, presents a challenging landscape. Commonly referred to as the “probiv market”—a term derived from the Russian word meaning “to pierce”—this shadowy industry has thrived off a web of corrupt officials and various low-level insiders willing to sell privileged access to confidential government and corporate records.

The Nature of the Probiv Market

For over a decade, the probiv market has developed within Russia’s corrupt public framework, becoming an essential resource for those seeking to exploit governmental inefficiencies as well as for those aiming to reveal them. The scale of such data leaks is notably Russian, and the market serves a wide array of buyers at varying price points. For as little as $10, individuals can purchase sensitive information like passport details, residential addresses, travel logs, vehicle registrations, and internal police documentation. At the higher end, comprehensive dossiers on individuals—complete with data on their communications and movements—can be acquired.

Impacts and Use Cases

The probiv market has been both a useful tool and a double-edged sword in Russia. Though controversial among journalists, it has been instrumental in high-profile investigations, such as the probe into the FSB’s involvement in the poisoning of Alexei Navalny. Additionally, state agencies have regularly leveraged this black market to monitor activists, opposition members, and others deemed unfavorable by the government.

“It is one of the paradoxes of modern Russia: on the one hand, these services are illegal and rely on leaked data, yet on the other, they are far more convenient for day-to-day police work than the multitude of official departmental databases,”

Shifting Dynamics Amid Political Changes

As the war in Ukraine has progressed, the Kremlin’s perception of the probiv market has shifted from a manageable convenience to a significant threat. Instances of phone scam syndicates utilizing leaked data have surged, and Ukrainian intelligence has adeptly tapped into this fragile data landscape to target military officials in Russia. President Vladimir Putin publicly acknowledged this issue during a nationwide call-in, revealing his personal connection to the problem when a friend fell victim to such a scam. This revelation marked a turning point, prompting heightened scrutiny and action against the probiv market.

Increasing Crackdown on Data Brokers

In response to the emerging threat, Putin has enacted stricter laws against data breaches, enforcing penalties of up to 10 years in prison for those involved in accessing or sharing such information. Russian security services have intensified their efforts to apprehend probiv operators, leading to several arrests, including a notorious team associated with a popular service known for its affordability.

However, this increased crackdown seems to have backfired, as many prominent operators and brokers are now relocating their activities outside of Russia’s jurisdiction. With fewer constraints and reduced fear of immediate capture, they are releasing sensitive information at an alarming pace.

The Rise of Informal Alternatives

Notably, in the past, some probiv services cooperated closely with state authorities, but this collaboration is diminishing. As a result, someone like Zakharov observes that operators are releasing more significant leaks than ever before. A remarkable example includes last year’s leak of a massive FSB database known as Kordon-2023, which contained detailed records of individuals crossing Russian borders from 2014 to 2023. This leak is seen as one of the most impactful to date.

Previously compliant services, like Himera, have publicly severed ties with law enforcement. Concurrently, pro-Ukrainian hackers have capitalized on this situation to penetrate Russian state and commercial systems, releasing valuable data for ideological reasons. A striking event occurred last year when the hacker group KibOrg unveiled a database from Alfa Bank, affecting around 24 million individuals and over 13 million organizations.

Conclusion

In summary, the Russian probiv market illustrates the complex interplay between data privacy, state control, and the nuances of corruption. As the geopolitical landscape continues to evolve, so too does the market for illicit personal information, raising pressing questions about privacy and security.

Key Takeaways

• The probiv market thrives on leaked personal data, exploiting a network of corrupt insiders.
• State agencies and journalists have utilized leaked data for various investigative purposes.
• Heightened government crackdowns have pushed many probiv operators to operate abroad.
• The ongoing war in Ukraine has further complicated the dynamics of the illicit data market.