Phone Numbers and Names: What the Russian Telecom Leak Exposed

HEROIC analysts confirmed 9,331,382 records inside a database labeled Russian Telecom, dated May 13, 2025. Each record contains a phone number, first and last name, date of birth, and gender, split into files by region. No email addresses or passwords appear anywhere in this data. The only way to know if you're affected is to scan your email.

Why Phone and Personal Data Alone Is Still Dangerous

Without a password in the mix, the danger here shifts to impersonation and targeted scam contact. A real phone number matched to a full name and date of birth is enough for an attacker to sound convincing on a call or text, or to answer security questions that rely on exactly this kind of detail.

What Was Exposed in the Russian Telecom Records

• Phone Number: opens the door to scam calls and texts that already know who they're targeting.
• First Name: adds a personal touch that makes a scam contact feel legitimate.
• Last Name: combined with other fields, helps confirm identity for more convincing impersonation.
• Birthday: often used as a security question answer, making it useful for identity verification bypass.
• Gender: adds another detail attackers can use to tailor a scam message.

Why This Still Creates Real-World Risk

With a phone number, full name, and birth date in hand, an attacker can run a convincing scam call or SMS phishing attempt that references real personal details. That combination is also commonly used to answer identity verification questions at banks and other services.

How a Database Leak of This Scale Happens

A breach of this kind is taken directly from a provider's own subscriber records rather than pieced together from older leaks. Once copied, this data gets split into regional files and distributed through channels like Telegram.

How to Respond to the Russian Telecom Leak

Scan your email to check your broader exposure, and treat unexpected calls or texts referencing your personal details with caution, especially any asking you to confirm a code or personal information. Consider adding a carrier PIN to prevent SIM-swap attempts. This applies to personal and work contact details alike.