December 28, 2024: The Young Army Cadets National Movement Was Breached

HEROIC researchers identified a breach of the Young Army Cadets National Movement portal, a Russian state-sponsored youth organization, on December 28, 2024. The exfiltration exposed 1,705 cadet records with email addresses, phone numbers, first names, last names, and birthdays. Because the organization operates under the Russian Ministry of Defense and engages minors, the leak carries unusual sensitivity compared to a typical civilian breach.

Why This Young Army Cadets Database Breach Is Dangerous

Leaks involving minors are especially damaging because children have longer identity lifespans and fewer existing fraud protections than adults. Combined with birthdays, the exposed contacts can be used to bypass knowledge-based account recovery on many services. The state-affiliated nature of the organization also draws interest from foreign intelligence collectors, who use youth-program PII to build long-term profiles of individuals linked to national defense programs.

What Was Exposed in Young Army Cadets National Movement

• 1,705 cadet records from the Young Army Cadets portal
• Email addresses tied to registered cadets and guardians
• Phone numbers used for program contact
• First names, last names, and birthdays of minors

Why This Matters

Even without passwords, the leak enables credential stuffing against email and social media, account takeover on platforms that use birthday as a recovery signal, identity theft against minors who may not discover the abuse for years, and fraud that impersonates the organization to target families. The dataset also raises concerns about targeted phishing, surveillance, and potential exploitation by foreign services interested in Russian defense-adjacent populations.

How Database Breaches Work

Government-linked database breaches frequently stem from outdated legacy systems, unpatched CMS platforms, and weak credentials on administrative interfaces. Once an attacker gains database access, they exfiltrate user tables in bulk. The data is then listed on dark web forums or traded through private channels, where it may be sold to identity-theft rings, used for hacktivist disclosures, or acquired by foreign intelligence brokers.

Check If You Are Affected

HEROIC tracks more than 400 billion compromised records across dark web marketplaces, underground forums, and surface web leaks. Run a free scan to check whether your email, phone number, or birthday appeared in the Young Army Cadets breach and to see every other leak that may threaten your identity.