Ukrainian Pravda leaks apparent personal data of 120,000 Russian soldiers fighting in Ukraine

[Nevilledog]

Link to tweet

Tweet text:

Thomas Rid 🌻
@RidT
Just wow wow wow. The Ukrainian newspaper Pravda leaked what appear to be personal data of 120,000 Russian soldiers fighting in Ukraine — if confirmed as accurate, we're probably looking at one of the best-timed and most devastating leaks of all time

pravda.com.ua
Особисті дані 120 тисяч військових РФ, що воюють в Україні
Центр оборонних стратегій отримав імена 120 тисяч російських військових, які воюють на території України.
9:12 AM · Mar 1, 2022

Unrolled thread
https://threadreaderapp.com/thread/1498692537741025284.html

Just wow wow wow. The Ukrainian newspaper Pravda leaked what appear to be personal data of 120,000 Russian soldiers fighting in Ukraine — if confirmed as accurate, we're probably looking at one of the best-timed and most devastating leaks of all time

Îñîáèñò³ äàí³ 120 òèñÿ÷ â³éñüêîâèõ ÐÔ, ùî âîþþòü â Óêðà¿í³ – ÖÎÑ
Öåíòð îáîðîííèõ ñòðàòåã³é îòðèìàâ ³ìåíà 120 òèñÿ÷ ðîñ³éñüêèõ â³éñüêîâèõ, ÿê³ âîþþòü íà òåðèòî𳿠Óêðà¿íè.
https://www.pravda.com.ua/news/2022/03/1/7327081/

6,616 pages of names, registration numbers, and places of service of Russians personnel — *just for volume comparison*, and nothing else: that's more pages than were ever published out of the Snowden cache.
Image

Ukrayinska Pravda is a serious outlet, claiming to have a "reliable source." Intel penetrations of Russian gov and mil targets appear to be off the charts. GRU and others have a long history of catastrophic OPSEC. Still, I would want to see some independent confirmation here.

Important to note that there's a long history of leaking lists of names of covert personnel (see chapter "The Book War," in my ACTIVE MEASURES). We have examples of lists that are entirely legit, and some that were at least in part forged, for practical and psychological effect.

What's the practical effect? We know from history that a leak of personnel names has a powerful psychological effect on the organization in question. It creates an acute sense of vulnerability, in a very personal way, for those in charge, and for those exposed.

A leak of this kind also creates an immediate, hard dilemma for leadership: do you tell your own people that they have been doxed, so they won't learn about it from social media, press, or families, and embarrass yourself now—or do you not tell them, and embarrass yourself later.

Of course there's also sweet historical irony in this leak (either way, if it's legit or forged): this is an old Soviet active measures tactic now used against an army under the command of an ex-KGB officer who surely is familiar with this method.

Important note of caution here from my old colleague Ian. Any successful hits in cross-referencing so far?

Link to tweet

?s=20&t=exMaI7b0wc6c7o2kzMjBOQ

Another note on verification: if history is any guide, then neither a few cross-referencing hits nor a few cross-referencing misses will allow a high-confidence assessment on the leak's veracity. The Russian army will either deny or glomar. Be prepared for long-term ambiguity.

Important note: this leak also exists in a file format that offers significantly more detail—and exif data. Some of the exif data show create/modify dates from April and June 2021, one file dates back to 2006.

Alternative hypothesis: we're looking at older, generic (and probably genuine) Russian army lists not directly linked to the invasion.

Worth noting that the leak appears to contain names, DOBs, addresses, unit affiliation, passport numbers, and phone numbers for thousands of alleged Russian military personnel. Verification more likely given this granular information.

Again: lists may not be linked to invasion.

[Tetrachloride]

1. The leaks, currently unconfirmed, have these aspects

1. Putin has a high level leak or hack

2. All those families are now or soon to be alerted

3. The soldiers themselves are on notice

4. Those crematoriums are less significant.

[gratuitous]

2. Even unconfirmed, the story will hurt morale

You're a young Russian, patrolling in Ukraine (a task you hadn't contemplated when your enlistment began three months ago), and you're hearing rumors about how badly things are going. The locals aren't exactly welcoming you with open arms, contrary to what your leaders assured you was going to happen. Worried about how things are going back home in Russia, as you're also hearing about large protests against what you're doing. And now you find out that your personal information could be out in the wild of the internets, promising to fuck up your life for years to come.

"And it's 1, 2, 3, what are we fighting for?"