Zonatelecom OSST

The United Service Service of Tula (OSST LLC) is an independent telecom operator with its own infrastructure for providing complex solutions in Russia. It provides the full range of modern telecommunications services, including being a virtual provider of IP telephony.

History

2024: Data breach of 198,000 customers

On September 19, 2024, it became known that the personal information of the clients of the Russian telecom operator ZT (Zonatelecom) was at the disposal of cybercriminals. This company, among other things, provides services to institutions of the Federal Penitentiary Service of Russia (FSIN).

According to the Telegram channel "Information Leaks," a dump of a database containing data from the ZT operator has appeared on the Internet. These are, in particular, the surnames and names of the company's customers, their date of birth, phone numbers (198 thousand unique combinations), email addresses (120 thousand unique e-mail), hashed passwords (MD5 with salt and SHA512-Crypt), names of correctional institutions of the Federal Penitentiary FSIN and much more. The leaked information is relevant on March 26, 2024.

𝓲

Freepik

Stolen information can be used to organize, for example, deeply personalized phishing attacks. Knowing the names of ZT customers, their phone numbers and other personal data, cybercriminals can put victims to sleep and convince them to make a money transfer under one pretext or another. As of September 24, 2024, the operator does not comment on the situation in any way. At the same time, Roskomnadzor, as the Moscow City News Agency clarifies, did not receive a notification of a personal data leak from a telecom operator.

ZT is an independent IT company, which since 2010 has been working in close cooperation with institutions of the UIS of Russia and providing comprehensive services for institutions of the Federal Penitentiary Service of Russia. Their use allows prisoners, convicts and defendants to maintain contact with family and loved ones without violating the rules of the institution's internal regulations. The main services of the company are the provision of negotiations, electronic correspondence and transfers of funds to the personal account of the convict.^[1]

Notes