State services Stopkoronavirus

2022: Data Breach

At the end of January 2022, it became known about the appearance on sale of a database of 48 million certificates of vaccination against coronavirus. COVID-19 The seller of this file Darknet in asks for $100 thousand for it.

According to the Telegram channel "Leaks of Information," information about vaccinated was obtained from the application "State Services STOP Coronavirus," developed by the Ministry of Digital Affairs. The database, according to the seller, contains the first letters of the name in Russian and English, the date of birth, some data from the passport, the name of the used vaccine in two languages, the unique number of the patient's register record and the QR code.

The darknet sells a database of QR codes vaccinated from the Ministry of Digital Affairs application

According to the Telegram channel "Leaks of Information," selective verification showed that QR codes are valid, lead to the site of State Services and the data in the sample completely coincides with what is indicated on the official page of checking QR codes

On January 25, 2022, the press service of the Ministry of Digital Affairs told RBC that the department began checking reports of data leakage from the State Services STOP Coronavirus application, through which you can also get a QR code for vaccination or transferred COVID-19. The ministry assured that there are no threats to the security of personal data of vaccinated or sick citizens. The agency also reported that it is impossible to use QR codes with information that, according to the Telegram channel, is presented in the database, for this it is still necessary to present an identity card.

Rostelecom reported that these data are invalid. According to her, this "data was generated outside the system and is not related to the current application user base."

After reports of information leakage, a selective check of QR codes was carried out and their inoperability was confirmed, the company said.[1]

2021: Launch a vaccination QR code authentication application

On October 29, 2021, the Ministry of Digital Development, Communications and Mass Communications of the Russian Federation announced that the mobile application "State Services Stopkoronavirus" launched by the agency was the only federal decision to check QR vaccination codes for COVID-19.

When scanning certificates of vaccinated and sick COVID-19, the program requests information from the COVID-19 registry. Ministry of Health Russia The results of immunological studies (PCR tests) for COVID-19, the service checks using the registry. Rospotrebnadzor These registries are the only reliable sources of information about vaccinated and sick people, as well as about citizens who have undergone PCR testing, the Ministry of Digital Affairs explained.

Ministry of Digital Affairs submitted an application verifying the authenticity of QR vaccination codes

If the application detects a QR code that is missing from the registers, it will fail. The application "State Services Stopkoronavirus" is available to all users with a confirmed account on the portal of State Services.

Frauds with fake certificates of vaccination against COVID-19 can entail criminal liability. If a citizen acquired and provided a fictitious certificate confirming vaccination to the organization, which was not actually carried out, he, in accordance with part 5 of article 327 of the Criminal Code of the Russian Federation, faces a fine of up to 80 thousand rubles, or in the form of compulsory work for up to 480 hours, or in the form of correctional labor for up to two years, or imprisonment for up to one year.

From March to the end of October 2021, Roskomnadzor removed or blocked 3.8 thousand resources with information on the sale of fake certificates of vaccination against COVID-19 coronavirus, as well as generating fake QR codes. In March, 24 resources were deleted or blocked, and in October there were 448.^[2][3]

Notes