CDEK Data Breach Exposed Millions of Customer Records in March 2022

On March 9, 2022, CDEK, a major Russian courier and logistics provider, was breached, resulting in the unauthorized access and leak of a massive trove of customer data. The breach sent shockwaves through the logistics industry, as it involved a staggering 815 million records and over 19 million unique email addresses—alongside names and phone numbers of affected individuals. With CDEK playing a crucial role for personal and business deliveries across Russia and internationally, the scale of compromised personal information highlights the wide-reaching impact of this incident.

What Happened in the CDEK Breach?

The breach was uncovered when a large cache of customer information was found available without authorization. Attackers accessed detailed records maintained by CDEK containing sensitive details such as full names, email addresses, and phone numbers. This large set of data not only reflects CDEK's customer reach but also the complexity of data protection challenges faced by major logistics firms handling millions of shipments annually.

When Did the CDEK Breach Occur?

The breach was discovered and publicly disclosed on March 9, 2022. Due to the nature of the exposed data and size of the dataset, it’s likely the initial intrusion happened shortly before the official uncovering, though exact timelines for the compromise phase remain unconfirmed.

How Many Users Were Affected?

The breach stands out for the sheer scale of affected individuals. More than 815 million records were exposed, out of which over 19 million unique email addresses were identified. The dataset’s scale means individuals who used CDEK’s delivery services over several years may have had their information included.

What Information Was Leaked in the CDEK Breach?

The compromised records contained critical personal information, specifically:

• Full names
• Email addresses
• Phone numbers

CDEK Data Breach Timeline

• Pre-March 2022: Data collected by CDEK for its delivery service operations.
• Early March 2022: Initial unauthorized access likely occurs.
• March 9, 2022: The breach is uncovered and details emerge about the massive volume of compromised records.

Frequently Asked Questions About the CDEK Breach

What happened in the CDEK data breach?

The CDEK breach involved unauthorized access to the company’s customer records, leading to the exposure of full names, email addresses, and phone numbers of millions of users.

How many users were affected in the CDEK data breach?

The breach impacted more than 815 million records, including over 19 million unique email addresses and associated contact information.

What data was leaked in the CDEK 2022 breach?

Full names, email addresses, and phone numbers were included in the leaked dataset.

Who was behind the CDEK breach?

The specific perpetrators of the CDEK breach have not been publicly identified as of now.

How can I check if I'm in the CDEK breach?

You can check if your information was part of the CDEK breach by utilizing the DeHashed search engine.