The Tele2 Russia Dump Contains Exactly 5,590,555 Email and Phone Number Pairs

In June 2022, Tele2 Russia, one of the Russian Federation's major telecommunications providers, had a database containing over 5.5 million customer records leaked onto dark web forums. The breach occured without exposing passwords, but the combination of full names, email addresses, and phone numbers across that many accounts creates a rich dataset for targeted phishing, SIM swapping, and social engineering operations.

What Attackers Can Do With 5.5 Million Telecom Records

Telecommunications data is partcularly valuable to threat actors because phone numbers enable SIM swap fraud, where attackers convince carriers to transfer a victim's number to an attacker-controlled SIM card. With the full name and email address from the Tele2 Russia breach, attackers have everything needed to impersonate victims during carrier verification calls and seize control of accounts protected by SMS-based two-factor authentication.

What Was Exposed in the Tele2 Russia Breach

• Email Address
• Phone Number
• First Name
• Last Name

Why Telecom Breaches Have Outsized Real-World Impact

Even without passwords, a dataset combining email, phone number, and full name allows attackers to build highly convincing spear-phishing messages, register fraudulent accounts using real identity fragments, and bypass SMS verification on financial and government platforms. The scale of 5,590,555 records means the data is almost certainly aggregated into commercial threat intelligence feeds and sold repeatedly across criminal marketplaces.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a backend data store, typically by exploiting software vulnerabilities, misconfigured cloud storage, or compromised internal credentials. Large telecommunications companies maintain extensive customer databases that, when breached, yield structured records well-suited for automated fraud at scale. Without robust access controls and anomaly detection, exfiltration of millions of records can go unnoticed for extended periods.

Check If Your Data Was Exposed

HEROIC's identity protection platform indexes over 400 billion exposed records, including data from the Tele2 Russia breach. Enter your email address to instantly check your exposure and receive alerts whenever your personal information surfaces in newly discovered breach datasets.