MM (Магнит Маркет)

We noticed a significant influx of user data appearing on a public Telegram channel on December 1st, 2024. What struck us immediately was the sheer volume and the sensitive nature of the information exposed, directly impacting a prominent Russian e-commerce platform. The compromised dataset, attributed to MM (Магнит Маркет), a key online marketplace for the Magnit retail chain, contained a broad spectrum of personally identifiable information (PII) and transactional details. This incident represents a substantial risk to the privacy and financial security of millions of its users, underscoring the persistent challenges in securing large-scale customer databases.

The breach breakdown reveals a database compromise affecting 4,268,543 records. The leaked data types include Email Address, Phone Number, First Name, Last Name, alongside more critical information such as delivery details, payment details, and dates. The source structure points to a direct database exfiltration, rather than a typical application-level vulnerability. The leak locations were primarily identified on a specific Telegram channel, indicating a deliberate and public dissemination of the compromised information. The aggregation of PII with payment and delivery details creates a potent combination for identity theft, phishing campaigns, and potentially even physical targeting of individuals.

While specific widespread news coverage for this particular leak on MM (Магнит Маркет) is still developing, similar incidents involving large retail platforms in the region have frequently made headlines. Open-source intelligence (OSINT) efforts are ongoing to track the full propagation of this data and identify any associated malicious activities. Research from cybersecurity firms has consistently highlighted the increasing sophistication of threat actors targeting e-commerce databases, often exploiting known vulnerabilities or leveraging insider threats. The scale of this breach aligns with broader trends of mass data exfiltration from high-profile online services.