DataSuckers

DataSuckers is a Russian-speaking, financially motivated data-theft and extortion group that emerged publicly in September 2026. The group publicly describes itself as financially rather than politically motivated and runs a public Telegram channel where it announces intrusions, publishes screenshots and data samples as proof, offers stolen databases for sale and invites victims, journalists and law enforcement to contact it. Its observed pattern combines intrusion into consumer-facing companies that hold large customer databases with website defacement and on-site extortion messages, including a countdown timer and a cryptocurrency ransom demand.

Press reporting attributes at least one initial access to corporate credentials exposed in a public code repository; this has not been independently verified. Observed victims are consumer-facing businesses in Russia and Ukraine in the restaurant, food retail and travel sectors, which is assessed to indicate financially driven targeting; the group itself states it is not politically motivated. The group's claims about the volume of stolen or destroyed data are self-reported and were partly disputed by the affected organizations.