Cyberattack Reveals Donor Details from Russian Charity Platforms Supporting Ukraine and Political Prisoners

Security researchers say that an unnamed group of hackers managed to infiltrate the payment processing accounts of two Russian fundraising initiatives that channel money to Ukrainian aid efforts and to families of political prisoners. The breach exposed the email addresses of contributors and a limited set of payment‑card details, prompting concerns about donor privacy and the integrity of charitable fundraising in a highly politicised environment.

The two projects, which operate through Russian banking channels, have been publicising their campaigns as a way for domestic supporters to assist civilians affected by the war in Ukraine and to provide financial assistance to relatives of individuals detained for political reasons. Both platforms rely on online payment processors to collect small donations from a dispersed base of contributors.

According to the investigation, the attackers gained administrative access to the accounts that store transaction records. While there is no indication that funds were diverted, the leak included thousands of email identifiers and partial card numbers, data that could be leveraged for phishing attacks or credential stuffing. The exposure underscores the vulnerability of charitable payment infrastructures, especially when they intersect with contested geopolitical issues.

Cyber‑security experts note that charitable organisations have increasingly become targets of sophisticated attacks, as adversaries seek to undermine public confidence or harvest personal data for illicit use. Past incidents have seen similar breaches in humanitarian fundraising platforms, prompting calls for stronger encryption, multi‑factor authentication, and regular security audits. The current leak adds pressure on Russian‑based charities to reassess their digital safeguards.

Organisers of the affected campaigns have issued statements acknowledging the incident and pledging to cooperate with law‑enforcement agencies to trace the perpetrators. They also urged donors to monitor their accounts for suspicious activity and to consider using secure payment methods in the future. As authorities investigate, the episode highlights the broader challenges of maintaining donor trust amid ongoing information warfare and the complex financial landscape surrounding the Russia‑Ukraine conflict.