Hackers who breached "Dodo Pizza" arrested. A Belarusian is among them
New details have emerged in Russia regarding the investigation into the large-scale cyberattack on the "Dodo Pizza" network, writes the Telegram channel Baza. As a result of the attack, personal data of the company's customers, including Belarusians, was leaked.
Illustrative photo
A group of four people may be involved in the breach, which occurred on September 28. Three alleged participants have already been arrested. Among them are citizens of Russia, Kazakhstan, and Belarus.
The identities of the suspects were established thanks to the carelessness of a 19-year-old resident of Barnaul, who was part of the group. When the young man tried to access the stolen data, he made a mistake that allowed his IP address to be identified.
According to the Baza channel, the young man previously hacked Ukrainian websites but later decided to choose a larger target in Russia.
The starting point was "Dodo Pizza" login credentials, which were found in open access on the GitHub platform. With their help, the hackers penetrated the company's internal systems and then gained access to cloud storage, databases, and passwords.
Experts estimate the volume of information accessed by the attackers at 3.7 TB — this is approximately 33 billion records. The array contained data on orders over 15 years of the network's operation, customers, employees, and delivery addresses.
The hackers put the stolen information up for sale on the dark web and received 100 thousand dollars for it.
The buyer transferred the entire sum to a crypto wallet that could have been used by all four members of the group. However, after the arrest of the 19-year-old Russian, the other three changed the passwords and blocked his access to the funds.
Soon, two more alleged participants of the cyberattack were taken into custody. Now, only the last suspect, who remains at large, has access to the money.
Previously, the National Center for Personal Data Protection of Belarus confirmed that the cyberattack on "Dodo Pizza" also affected Belarusian customers of the network.
As a result of the leak, names, addresses, email, phone numbers, dates of birth, and order details could have been compromised.
The center explained that the personal data of Belarusians was transferred to the Russian company within the framework of the franchising network.