Russia’s National Coordination Center for Computer Incidents (NKTsKI) has warned organizations in the country’s financial sector about a breach at LANIT, a major Russian IT service provider. The attack occurred on February 21, 2025, and may have impacted LLC LANTER and LLC LAN ATMservice, both part of the LANIT Group.
LANIT is Russia’s largest system integrator and has clients including the Russian Ministry of Defense and major players in the military-industrial complex. Due to the breach, NKTsKI recommends that all potentially affected organizations change passwords, access keys, and remote access credentials.
The center advises enhancing monitoring of threats and information security events for systems developed or maintained by LANIT engineers. Additional security recommendations are included in a PDF file.
It is not clear how attackers gained access to the LANIT network or what data may have been stolen. However, this breach highlights concerns over supply chain compromises after Russian ATM operators and banks have been targeted by Ukrainian hackers using distributed denial of service tactics.
Source: https://www.bleepingcomputer.com/news/security/russia-warns-financial-sector-of-major-it-service-provider-hack