{"id":161282,"date":"2022-01-24T21:24:37","date_gmt":"2022-01-24T19:24:37","guid":{"rendered":"https:\/\/uacrisis.org\/?p=161282"},"modified":"2022-01-24T21:47:40","modified_gmt":"2022-01-24T19:47:40","slug":"withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january","status":"publish","type":"post","link":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january","title":{"rendered":"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January"},"content":{"rendered":"\n

Situation in the combat zone<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk agreements. There were similar attacks throughout last week.<\/p>\n\n\n\n

A Ukrainian service member was wounded in action.<\/p>\n\n\n\n

U.S. <\/strong>authorizes embassy staff to leave Ukraine, EU diplomats stay put<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

On January 24, the U.S. Department of State authorized the voluntary departure of U.S. government employees and ordered the departure of family members of U.S. government employees at the U.S. Embassy in Kyiv, effective immediately. <\/p>\n\n\n\n

Authorized departure gives these employees the option to depart if they wish; their departure is not required. Ordered departure for family members requires that family members leave the country. The U.S. Embassy\u2019s departure status will be reviewed in no later than 30 days. <\/p>\n\n\n\n

The U.S. Department of State made the decision to authorize departure from Mission Ukraine \u201cout of an abundance of caution due to\u202fcontinued Russian efforts to destabilize the country and undermine the security of Ukrainian citizens and others visiting or residing in Ukraine\u201d.<\/p>\n\n\n\n

The U.S. Department of State has been in consultation with the Ukrainian government about this step and is coordinating with Allied and partner embassies in Kyiv as they determine their posture, the statement reads.<\/p>\n\n\n\n

Additionally, the U.S. State Department has elevated its previous travel advisory rating for Ukraine to level four \u2013 \u201cDo Not Travel due to the increased threats of significant Russian military action against Ukraine\u201d.<\/p>\n\n\n\n

EU diplomats stay in place. <\/strong>The European Union will not follow the U.S. in ordering its embassy staff and their families to leave Ukraine, the EU foreign policy chief Josep Borrell said Monday as he arrived for a meeting of EU foreign ministers.<\/p>\n\n\n\n

\u201cWe are not going to do the same thing because we don\u2019t know any specific reasons,\u201d Borrell is quoted as saying. \u201cI don\u2019t think we had to dramatize as far as the negotiations are going on \u2014 and they are going on,\u201d he added.<\/p>\n\n\n\n

The meeting of EU foreign ministers will also include videolink participation by U.S. Secretary of State Antony Blinken, the EU foreign policy chief said.<\/p>\n\n\n\n

As of this writing, the UK also announced plans to withdraw some embassy staff from Ukraine.<\/p>\n\n\n\n

Ukrainians\u2019 personal data from Diia posted for sale: what is known so far<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Background. <\/strong>On the night of January 21 into January 22, 2022, a user nicknamed \u201cFreeCivilian\u201d posted for sale personal data of Ukrainians on the web site RaidForums. Part of the information was allegedly obtained from the digital public services web site Diia. <\/p>\n\n\n\n

The exposed data is on sale for USD 15,000, and allegedly includes:<\/p>\n\n\n\n

-2.6 million records with users\u2019 email address, full name, birth date, telephone number, sex, taxpayer identification number, number and expiration date of domestic and international passport.   <\/p>\n\n\n\n

-13.5 million records with low-resolution images of users\u2019 passports, ID cards, driving licenses, military records, university diplomas, and vaccination certificates in JPG format.<\/p>\n\n\n\n

-4.1 million records of Ukrainians\u2019 \u201cdetailed personal information including their documents.\u201d<\/p>\n\n\n\n

The user also posted free data samples that include 100,000, 190,000, and 26,000 records respectively. <\/p>\n\n\n\n

Actual breach of personal data?<\/strong> There is a high probability that actual personal information of Ukrainians was posted for sale, cyber security professionals in public and private sectors say as quoted by Novoe Vremya (New Time).<\/p>\n\n\n\n

Commentary by Ukrainian government.<\/strong> An alleged data breach is another act of hybrid war, the Ministry of Digital Transformation of Ukraine said in a statement.<\/p>\n\n\n\n

\u201cStarting late last week, personal data allegedly obtained in a cyberattack on January 13-14 was posted online for sale a number of times. Some vendors say the data was taken from the database of Diia. Those acts aim to intimidate Ukrainians and destabilize the country by disrupting public services,\u201d the statement reads.<\/p>\n\n\n\n

The Diia application does not store personal data, but displays data held within public registries, the agency added. Yet the alleged data breach refers to the web site of digital public services not the application. The Diia web site has more than 13 million users, not two million as the vendors claim, the Ministry said. Personal records that were recently posted for sale, were obtained from various sources before 2019, the digital agency added.  <\/p>\n\n\n\n

View of cyber experts.<\/strong> Some do not trust the official statement. First, when asked by Novoe Vremya if the dump posted on RaidForums was analyzed, the Ministry of Digital Transformation could not answer. Second, the Ministry did not say which databases the exposed data came from. The agency also provided screenshots of other data vendors. Finally, some records exposed by \u201cFreeCivilian\u201d were dated January 2022.<\/p>\n\n\n\n

Hackers that shut down Ukraine\u2019s government websites are responsible for cyberattack on Bundestag<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

A group of hackers that defaced a number of Ukrainian government web sites on January 14 is linked to the Russian security service and is the same group that hit the Bundestag and the Polish government, a Polish official said.<\/p>\n\n\n\n

\u201cAccording to the information we have, the cyberattack on Kyiv on January 14 was carried out by a group of hackers linked to the Russian security services. The same group of hackers is responsible for exposing correspondence of Polish government officials. Last summer, the same group of hackers made a cyberattack on the German Bundestag ahead of the September elections. That same group was involved in the recent attacks on Ukraine’s government web sites,\u201d Andrzej Sado\u015b, Permanent Representative of Poland to the European Union told journalists last week.<\/p>\n\n\n\n

On the night of January 13 into January 14, 2022, Ukrainian government websites were targeted in a cyberattack.<\/p>\n\n\n\n

Five facts about massive cyberattack against Ukraine<\/strong><\/p>\n\n\n\n

A new infographic<\/a> by UCMC\u2019s Hybrid Warfare Analytical Group on a recent cyberattack that hit Ukraine government websites. <\/p>\n\n\n\n

Opinion polling: Zelenskyi, Poroshenko would win most votes<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

If the presidential elections were today, most Ukrainians would re-elect Volodymyr Zelenskyi or vote for former president, MP Petro Poroshenko, a survey conducted by the Kyiv International Institute of Sociology on January 20-21 finds. <\/p>\n\n\n\n

\u201cVolodymyr Zelenskyi (23.5 per cent) and Petro Poroshenko (20.9 per cent) would win the most votes. The difference between their scores is within the margin of error, so formally they share the first place,\u201d the survey says. <\/p>\n\n\n\n

The poll gives the chief of \u201cBatkivshyna\u201d party Yulia Tymoshenko 11.8 per cent, the leader of the \u201cPower and Honor\u201d (Syla i Chest) party Ihor Smeshko \u2013 9.6 per cent, and a leader of the \u201cOpposition Platform \u2013 For Life\u201d (Opozytsiyna Platforma \u2013 Za Zhyttya) Yuriy Boiko 9.3 per cent.<\/p>\n\n\n\n

How Ukraine is fighting COVID-19<\/strong><\/p>\n\n\n\n

\"\"
\u00a9 pixabay.com<\/figcaption><\/figure>\n\n\n\n

Ukraine nears the peak of coronavirus cases. On January 23, Ukraine recorded 12,915 cases, 2,430 recoveries, and 67 deaths. Last week, daily cases peaked at 20,000.<\/p>\n","protected":false},"excerpt":{"rendered":"

Situation in the combat zone On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk agreements. There were similar attacks throughout last week. A Ukrainian service member was wounded in action. U.S. authorizes embassy staff to leave Ukraine, EU diplomats stay put On January 24, the […] More<\/a><\/p>\n","protected":false},"author":16,"featured_media":161268,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[700,699,611],"tags":[],"section":[743,648],"form":[],"yoast_head":"\nWithdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January | UACRISIS.ORG<\/title>\n<meta name=\"description\" content=\"Situation in the combat zone On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk | Uacrisis.org\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January | UACRISIS.ORG\" \/>\n<meta property=\"og:description\" content=\"Situation in the combat zone On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk | Uacrisis.org\" \/>\n<meta property=\"og:url\" content=\"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january\" \/>\n<meta property=\"og:site_name\" content=\"Uacrisis.org\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/uacrisis\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-01-24T19:24:37+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-24T19:47:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/uacrisis.org\/wp-content\/uploads\/2022\/01\/ssha-kopiya.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1300\" \/>\n\t<meta property=\"og:image:height\" content=\"729\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@uacrisis\" \/>\n<meta name=\"twitter:site\" content=\"@uacrisis\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0412\u0456\u043a\u0442\u043e\u0440\u0456\u044f \u0417\u0430\u0431\u0456\u044f\u043d\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January | UACRISIS.ORG","description":"Situation in the combat zone On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk | Uacrisis.org","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january","og_locale":"en_US","og_type":"article","og_title":"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January | UACRISIS.ORG","og_description":"Situation in the combat zone On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk | Uacrisis.org","og_url":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january","og_site_name":"Uacrisis.org","article_publisher":"https:\/\/www.facebook.com\/uacrisis\/","article_published_time":"2022-01-24T19:24:37+00:00","article_modified_time":"2022-01-24T19:47:40+00:00","og_image":[{"width":1300,"height":729,"url":"https:\/\/uacrisis.org\/wp-content\/uploads\/2022\/01\/ssha-kopiya.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_creator":"@uacrisis","twitter_site":"@uacrisis","twitter_misc":{"Written by":"\u0412\u0456\u043a\u0442\u043e\u0440\u0456\u044f \u0417\u0430\u0431\u0456\u044f\u043d","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/uacrisis.org\/uk\/#organization","name":"Ukraine crisis media center","url":"https:\/\/uacrisis.org\/uk\/","sameAs":["https:\/\/www.facebook.com\/uacrisis\/","http:\/\/youtube.com\/UACrisisMediaCenter","https:\/\/twitter.com\/uacrisis"],"logo":{"@type":"ImageObject","@id":"https:\/\/uacrisis.org\/uk\/#logo","inLanguage":"en-US","url":"https:\/\/uacrisis.org\/wp-content\/uploads\/2019\/10\/header_logo-1.png","contentUrl":"https:\/\/uacrisis.org\/wp-content\/uploads\/2019\/10\/header_logo-1.png","width":250,"height":90,"caption":"Ukraine crisis media center"},"image":{"@id":"https:\/\/uacrisis.org\/uk\/#logo"}},{"@type":"WebSite","@id":"https:\/\/uacrisis.org\/uk\/#website","url":"https:\/\/uacrisis.org\/uk\/","name":"Uacrisis.org","description":"Ukraine crisis media center","publisher":{"@id":"https:\/\/uacrisis.org\/uk\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/uacrisis.org\/uk\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#primaryimage","inLanguage":"en-US","url":"https:\/\/uacrisis.org\/wp-content\/uploads\/2022\/01\/ssha-kopiya.jpg","contentUrl":"https:\/\/uacrisis.org\/wp-content\/uploads\/2022\/01\/ssha-kopiya.jpg","width":1300,"height":729},{"@type":"WebPage","@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#webpage","url":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january","name":"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January | UACRISIS.ORG","isPartOf":{"@id":"https:\/\/uacrisis.org\/uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#primaryimage"},"datePublished":"2022-01-24T19:24:37+00:00","dateModified":"2022-01-24T19:47:40+00:00","description":"Situation in the combat zone On January 23, Russia-backed militants made 10 attacks, eight of which included the use of weapons banned under the Minsk | Uacrisis.org","breadcrumb":{"@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/uacrisis.org\/en"},{"@type":"ListItem","position":2,"name":"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January"}]},{"@type":"Article","@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#article","isPartOf":{"@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#webpage"},"author":{"@id":"https:\/\/uacrisis.org\/uk\/#\/schema\/person\/0fa5746f26fcb8f0801386493ddf752a"},"headline":"Withdrawal of U.S. embassy staff, massive data breach, hacking group that hit Bundestag, and more \u2013 Weekly Update on Ukraine #3, 17-23 January","datePublished":"2022-01-24T19:24:37+00:00","dateModified":"2022-01-24T19:47:40+00:00","mainEntityOfPage":{"@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#webpage"},"wordCount":1132,"publisher":{"@id":"https:\/\/uacrisis.org\/uk\/#organization"},"image":{"@id":"https:\/\/uacrisis.org\/en\/withdrawal-of-u-s-embassy-staff-massive-data-breach-hacking-group-that-hit-bundestag-and-more-weekly-update-on-ukraine-3-17-23-january#primaryimage"},"thumbnailUrl":"https:\/\/uacrisis.org\/wp-content\/uploads\/2022\/01\/ssha-kopiya.jpg","articleSection":["Information war","Politics","Security"],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/uacrisis.org\/uk\/#\/schema\/person\/0fa5746f26fcb8f0801386493ddf752a","name":"\u0412\u0456\u043a\u0442\u043e\u0440\u0456\u044f \u0417\u0430\u0431\u0456\u044f\u043d"}]}},"wps_subtitle":"","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/posts\/161282"}],"collection":[{"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/comments?post=161282"}],"version-history":[{"count":1,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/posts\/161282\/revisions"}],"predecessor-version":[{"id":161289,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/posts\/161282\/revisions\/161289"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/media\/161268"}],"wp:attachment":[{"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/media?parent=161282"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/categories?post=161282"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/tags?post=161282"},{"taxonomy":"section","embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/section?post=161282"},{"taxonomy":"form","embeddable":true,"href":"https:\/\/uacrisis.org\/en\/wp-json\/wp\/v2\/form?post=161282"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}