The charges were brought under part 1 of article 183 of the Criminal Code of Russia (illegal receipt and disclosure of information constituting a trade secret) and part 1 of article 282 of the Criminal Code (unlawful access to computer information protected by law).
“The investigation established that in June 2019, a young man, using for authorization illegally obtained accounts of two users of Russian Railways employees and 96 unique IP addresses, made unlawful access to information protected by law that is on the organization’s internal resources,” in the message.
According to the investigation, after that the accused illegally copied several hundred thousand photographs and personal data about the management and employees of the company. Then this data was posted on one of the Internet resources, the hosting of which is located in Germany.
The suspect was found during the work of the investigating authorities, the Ministry of Internal Affairs, and the Russian Railways security service.
“The young man, who is an IT specialist, pleaded guilty to the said cyber attack on the internal resources of Russian Railways,” the UK said.
In August, Russian Railways reported that they were conducting an audit in connection with the placement of personal data of the company's employees in the public domain.