Moscow detains suspected DataSuckers members over Dodo Pizza breach

Moscow put a 19-year-old suspected DataSuckers member under house arrest after the Dodo Pizza breach.

Russian authorities detained three suspected members of the financially motivated DataSuckers group after a Dodo Pizza breach that both reports say involved records covering hundreds of millions of orders over 15 years. A Moscow court placed 19-year-old Denis Fridman under house arrest until December 8; DataBreaches.net says he is charged with illegally handling computer information containing personal data. A fourth suspect remains at large, and both outlets say the suspects include citizens of Russia, Kazakhstan, and Belarus. The Record adds that investigators say the attackers used corporate credentials found on GitHub and later sold the database for $100,000. It also reports claims involving Tez Tour and Ukraine’s ATB chain, including 7.9 million customer records and a $400,000 extortion demand, while noting that several data-theft claims remain disputed or unverified. DataBreaches.net describes attacks on businesses in Russia and Ukraine more generally and does not include those figures.

• Three suspected DataSuckers members were detained in Moscow; a fourth remains at large.
• Denis Fridman, 19, was placed under house arrest until December 8.
• DataBreaches.net says the charge is illegally handling computer information containing personal data.
• The Dodo Pizza breach allegedly covered hundreds of millions of orders over 15 years.
• The Record reports attackers used corporate credentials found on GitHub and sold the database for $100,000.
• The Record says DataSuckers claimed 7.9 million ATB customer records, a $400,000 demand, and an attack on Tez Tour; some claims remain disputed or unverified.
• Suspects reportedly include citizens of Russia, Kazakhstan, and Belarus.