Russian internet provider Nodex suffered a devastating cyberattack earlier this week in which hackers breached its network and wiped its internal servers, immediately completely cutting off internet connectivity to Russian customers. announced that the system is being restored.
The Russian regional ISP outage began late on January 6, and customer internet traffic levels continue to show 0%, according to data from Cloudflare, a leading network that monitors internet trends and traffic.
Nodex's internet traffic collapsed late on January 6, 2025. Image credit: Cloudflare / TechCrunch (screenshot)
In a post on Russian social networking site VK, Nodex acknowledged the cyberattack. “The network has been destroyed.” The post said, “We are raising funds from backup copies,” according to a machine translation. The internet provider said there are no immediate plans for restoration.
The company later attributed the cyberattack to Ukrainian hackers and said it caused a “complete failure” of its infrastructure, according to a translation.
A hacker group called the Ukraine Cyber Alliance took credit for the cyber attack and posted screenshots of key servers in Nodex's network.
“Russian internet provider Nodex in St. Petersburg was completely looted and wiped out. According to the group’s post on Telegram, data was leaked but empty equipment with no backup was left behind. Screenshots show: Shows access to Nodex's internal network, including one of the systems for virtual machines, backups, and other critical systems.
According to The Record, which first reported the breach, the Ukrainian Cyber Alliance is a pro-Ukrainian activist group formed in 2016 to target Russian companies after a full-scale invasion of Ukraine in 2022.
As of Wednesday evening in St. Petersburg, Russia, where Nodex provides internet service, the company said restoration efforts were “continuing.”