Loading story…
A cyberattack disrupted operations at Vladimir Bread Factory, a major bakery producer in Russia’s Vladimir region, after attackers hit the company’s internal digital environment overnight on Sunday. The incident knocked out office IT, including computers, servers, electronic document management tools, and the widely used 1C enterprise accounting system, forcing the company to revert to manual order and shipment processing and move office staff to a round-the-clock schedule. While production lines and bakeries reportedly continued operating at full capacity, the outage significantly complicated order processing and deliveries, contributing to localized delivery failures and temporary shortages of the company’s bakery products.
The attacker identity and incident type (e.g., ransomware vs. other intrusion) were not confirmed, and the company did not provide a timeline for full restoration of affected systems. Reporting also noted this incident in the context of broader cyber-related disruptions in Russia’s food sector, including a prior attack that disabled the country’s animal-based product certification platform (triggering paper-based workarounds and logistics delays) and a separate ransomware incident affecting a large dairy processing plant in southern Siberia in early 2025, which local media speculated may have been linked to the plant’s reported support for Russian troops in Ukraine (without official attribution).
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Following the attack, the company moved office staff to round-the-clock work and reverted to manual order and shipment processing to keep products moving. Retail chains acknowledged delivery disruptions but said there was no broad bread shortage, and the company gave no timeline for full restoration.
On a Sunday in late January 2026, Vladimir Bread Factory suffered a cyberattack that knocked out office computers, servers, electronic document management, and the 1C accounting system. Production continued, but order processing and deliveries were disrupted, causing temporary shortages in some stores and contract-fulfillment problems.
Southern Siberia’s largest dairy processing plant was hit by ransomware, in an incident reported as occurring in early 2025 and referenced as a prior food-sector cyber disruption. Some reporting speculated the attack may have been connected to the plant’s support for Russian troops in Ukraine.
A cyberattack disrupted Russia’s digital certification system for animal-based products, affecting food-sector operations including local dairy producers. The references describe this as a prior incident in June, before the bread factory attack.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A large-scale distributed denial-of-service (DDoS) attack targeted Russia’s Federal Service for Veterinary and Phytosanitary Surveillance (Rosselkhoznadzor), severely disrupting the agency’s critical information systems, including VetIS and Saturn. The attack rendered the Mercury platform, which is essential for issuing electronic veterinary certificates, temporarily unavailable, halting the movement of agricultural products and chemicals across the country. Major dairy and baby food producers reported hours-long delays, as they were unable to obtain the mandatory documentation required for legal shipment of meat, milk, and other animal products. The agency confirmed that there was no compromise of data integrity or confidentiality, and mitigation efforts were underway with support from major Russian telecom providers. The disruption led to significant financial losses for suppliers and forced some to negotiate with retail chains for emergency shipment procedures. While Rosselkhoznadzor stated that the Mercury system was operating normally by the following day, the incident highlighted the vulnerability of Russia’s food supply chain to cyberattacks. No hacker group has claimed responsibility for the attack, and this marks at least the fourth such incident targeting the Mercury system in 2025. The agency and affected companies are reviewing emergency protocols to prevent future disruptions of this scale.
Jul 3, 2026
Hackers reportedly breached Belarusian Railway systems and disrupted services in an apparent effort to slow the movement of Russian troops through Belarus. The attack was attributed in public reporting to activist-aligned operators who said they encrypted servers, databases, and workstations while sparing automation and safety systems to avoid endangering passengers. Ticketing and freight operations were reportedly affected, and the attackers demanded the release of political prisoners and the withdrawal of Russian forces from Belarusian territory. The incident unfolded amid heightened regional tensions and concerns that Belarusian infrastructure could be used to support Russian military deployments near Ukraine. Public reports said the railway acknowledged technical problems with online services, while the attackers framed the operation as a politically motivated act of sabotage against military logistics rather than a conventional financially driven ransomware campaign.
Jul 3, 2026
A **cyberattack** disrupted operations at **Delta**, a Russian provider of alarm and security systems for homes, businesses, and vehicles, causing widespread outages and customer complaints. Delta described the incident as a “**large-scale**” and “well-organized” external attack, with company leadership claiming it originated from an unspecified **hostile foreign state**; Delta also said it had **no evidence** at the time that customers’ personal data had been compromised. As services went down, Delta’s **website and phone lines** remained offline into the following day, forcing the company to communicate with customers via **VKontakte** while it worked to restore systems from backups amid concerns about follow-on attacks. The outage had immediate real-world impact, particularly for users of Delta’s vehicle security features: reports described customers being unable to **unlock cars**, **disable alarms**, or use **remote start**, with some accounts alleging doors locking unexpectedly and even **engines shutting down while in motion**. Separate reporting noted Delta’s app (launched in 2020) supports tracking vehicle location and stores **payment data**, increasing customer concern about potential exposure if Delta’s internal systems were breached; however, no threat actor has claimed responsibility and it remains unclear whether the disruption was caused by **DDoS** or a more destructive intrusion such as **ransomware** or a **wiper**.
Jun 29, 2026