{"id":312975,"date":"2025-08-02T22:13:13","date_gmt":"2025-08-02T22:13:13","guid":{"rendered":"https:\/\/www.europesays.com\/uk\/312975\/"},"modified":"2025-08-02T22:13:13","modified_gmt":"2025-08-02T22:13:13","slug":"even-when-the-internet-works-in-russia-something-on-it-doesnt-heres-whats-broken-over-the-past-month-meduza","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/uk\/312975\/","title":{"rendered":"Even when the Internet works in Russia, something on it doesn\u2019t. Here\u2019s what\u2019s broken over the past month. \u2014 Meduza"},"content":{"rendered":"<p><img decoding=\"async\" src=\"data:image\/gif;base64,R0lGODlhAQABAPAAAPLy8gAAACH5BAAAAAAALAAAAAABAAEAAAICRAEAOw==\"\/><\/p>\n<p class=\"SimpleBlock-module_lead__NzEPT  SimpleBlock-module_center__D1CsV\">In\u00a0Russia, Internet outages have become routine. Website crashes and service disruptions are nothing new, either. But the most serious incident came on\u00a0July 28, when Ukrainian and Belarusian hackers <a href=\"https:\/\/meduza.io\/en\/feature\/2025\/07\/30\/assessing-aeroflot-s-aftermath\" rel=\"noopener\" target=\"_blank\">broke into<\/a> Aeroflot\u2019s\u00a0internal systems \u2014 delaying 150 flights, stranding at\u00a0least 20,000 passengers, and costing the airline more than 250 million rubles (over $3 million). And it\u00a0was far from the only disruption that month. Some appeared to\u00a0be\u00a0the result of\u00a0cyberattacks, others possibly linked to\u00a0state-imposed blocks. In\u00a0many cases, the cause remains unclear. Meduza takes a\u00a0look back at\u00a0all of\u00a0the services that broke across the Russian Internet over the past month.<\/p>\n<p><strong>Retail<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>VkusVill grocery chain.<\/strong> On\u00a0July 30, VkusVill\u2019s\u00a0online store <a href=\"https:\/\/meduza.io\/news\/2025\/07\/30\/v-rabote-vkusvilla-i-samokata-proizoshel-sboy-vo-vkusville-utverzhdayut-chto-eto-ne-hakerskaya-ataka\" rel=\"noopener\" target=\"_blank\">went down<\/a>. The company emphasized that this was not a\u00a0hacker attack. The issue was resolved about four hours later.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Dobrotsen discount stores.<\/strong> On\u00a0July 30, the company\u2019s\u00a0website <a href=\"https:\/\/moika78.ru\/news\/2025-07-30\/1173192-sboj-proizoshel-v-rabote-samokata-i-dobroczena\/\" rel=\"noopener\" target=\"_blank\">stopped<\/a> working. Dobrotsen <a href=\"https:\/\/vk.com\/dobrotcensklad?w=wall-149955139_79083\" rel=\"noopener\" target=\"_blank\">described<\/a> the incident as\u00a0an\u00a0\u201cinternal failure.\u201d However, <a href=\"https:\/\/t.me\/mash\/66475\" rel=\"noopener\" target=\"_blank\">according to<\/a> the Telegram channel Mash, it\u00a0was a\u00a0hacker attack that took down the website and disrupted operations at\u00a0the company\u2019s\u00a0warehouses and offices.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Evotor online point-of-sale service.<\/strong> On\u00a0the morning of\u00a0July 30, users across multiple regions in\u00a0Russia <a href=\"https:\/\/rb.ru\/news\/roznica-zavisla-u-evotora-masshtabnyj-sboj-umnye-onlajn-kassy-perestali-rabotat-po-vsej-strane\/\" rel=\"noopener\" target=\"_blank\">began reporting<\/a> that Evotor\u2019s\u00a0website and mobile app were down, with widespread issues placing orders and processing payments. The company blamed the outage on\u00a0a\u00a0problem with its provider but gave no\u00a0estimated timeline for resolution. Another wave of\u00a0user complaints <a href=\"https:\/\/downdetector.su\/evotor\" rel=\"noopener\" target=\"_blank\">followed<\/a> on\u00a0the morning of\u00a0July 31.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Vinlab alcohol retailers.<\/strong> All Vinlab stores <a href=\"https:\/\/meduza.io\/news\/2025\/07\/16\/set-alkomarketov-vinlab-ostanovila-rabotu-iz-za-bespretsedentnoy-kiberataki-magaziny-zakryty-uzhe-tri-dnya\" rel=\"noopener\" target=\"_blank\">shut down<\/a> on\u00a0July 14 and only began reopening on\u00a0July 22. The chain\u2019s\u00a0parent company, Novabev Group, said it\u00a0had been targeted by\u00a0an\u00a0\u201cunprecedented cyberattack\u201d after refusing to\u00a0pay a\u00a0ransom. According to\u00a0<a href=\"https:\/\/www.forbes.ru\/biznes\/542038-hakery-protiv-vinlaba-ubytki-seti-iz-za-kiberataki-sostavat-bolee-1-mlrd-rublej\" rel=\"noopener\" target=\"_blank\">estimates<\/a> from experts, the shutdown cost Novabev Group more than 1 billion rubles (over $12 million) in\u00a0losses.<\/p>\n<p><strong>Restaurants and delivery<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Rostic\u2019s\u00a0(formerly KFC).<\/strong> On\u00a0July 30\u201331, online ordering and self-service kiosks <a href=\"https:\/\/meduza.io\/news\/2025\/07\/30\/set-restoranov-rostic-s-v-proshlom-kfc-coobschila-o-sboyah-vsled-za-vkusvillom-i-samokatom\" rel=\"noopener\" target=\"_blank\">were down<\/a>. According to\u00a0posts from Rostic\u2019s\u00a0on\u00a0social media, restoring service took at\u00a0<a href=\"https:\/\/vk.com\/rostics_official?w=wall-30637940_4202625\" rel=\"noopener\" target=\"_blank\">least<\/a> <a href=\"https:\/\/vk.com\/rostics_official?w=wall-30637940_4202688\" rel=\"noopener\" target=\"_blank\">13 hours<\/a>. The company did not disclose the cause of\u00a0the outage.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Samokat delivery service.<\/strong> The service also <a href=\"https:\/\/meduza.io\/news\/2025\/07\/30\/v-rabote-vkusvilla-i-samokata-proizoshel-sboy-vo-vkusville-utverzhdayut-chto-eto-ne-hakerskaya-ataka\" rel=\"noopener\" target=\"_blank\">went down<\/a> on\u00a0July 30, around the same time as\u00a0VkusVill, but resumed operations relatively quickly \u2014 though <a href=\"https:\/\/downdetector.su\/samokat\" rel=\"noopener\" target=\"_blank\">not<\/a> for all users. No\u00a0explanation was provided.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Vkusno i\u00a0tochka (formerly McDonald\u2019s).<\/strong> On\u00a0July 18, the chain<a href=\"https:\/\/t.me\/meduzalive\/129610\" rel=\"noopener\" target=\"_blank\"> announced<\/a> that its mobile app was unavailable due to\u00a0a\u00a0\u201cprovider failure.\u201d<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>iiko restaurant automation service.<\/strong><a href=\"https:\/\/iiko.ru\/about\/news\/stop-ddos.html\" rel=\"noopener\" target=\"_blank\"> According to<\/a> the company, its servers were hit by\u00a0\u201cunprecedented DDoS attacks\u201d beginning July 18, which it\u00a0was only able to\u00a0repel on\u00a0July 22.<\/p>\n<p><strong>Clinics and pharmacies<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Stolichki and Neopharm pharmacies.<\/strong> On\u00a0July 29, internal systems at\u00a0Stolichki <a href=\"https:\/\/meduza.io\/news\/2025\/07\/29\/v-rabote-aptechnyh-setey-stolichka-i-neofarm-proizoshel-sboy\" rel=\"noopener\" target=\"_blank\">began<\/a> to\u00a0malfunction, forcing some locations to\u00a0close. Neopharm pharmacies \u2014 part of\u00a0the same holding company \u2014 also experienced shutdowns. <a href=\"https:\/\/vk.com\/stolichki_official?w=wall-80253821_383249\" rel=\"noopener\" target=\"_blank\">Both<\/a> <a href=\"https:\/\/vk.com\/aptekaneopharm?w=wall-78668846_4240\" rel=\"noopener\" target=\"_blank\">chains<\/a> reported being targeted by\u00a0hackers and have yet to\u00a0confirm full recovery.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Semeiny Doktor clinics.<\/strong> On\u00a0July 29, the clinic network\u2019s\u00a0website <a href=\"https:\/\/rtvi.com\/news\/eshhe-odna-kiberataka-set-klinik-semejnyj-doktor-soobshhila-o-sboe\/\" rel=\"noopener\" target=\"_blank\">stopped<\/a> allowing users to\u00a0book appointments or\u00a0access their personal accounts. The parent company <a href=\"https:\/\/t.me\/kommersant\/87984\" rel=\"noopener\" target=\"_blank\">said<\/a> Semeiny Doktor had been targeted in\u00a0a\u00a0hacker attack, but claimed no\u00a0patient data had been leaked.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Medsi clinics.<\/strong> Russia\u2019s\u00a0largest private clinic network <a href=\"http:\/\/forbes.ru\/tekhnologii\/541339-v-medsi-soobsili-ob-ustranenii-sboa-v-rabote-informacionnoj-sistemy\" rel=\"noopener\" target=\"_blank\">reported<\/a> technical problems on\u00a0July 7. According to\u00a0Medsi, the outage lasted less than an\u00a0hour. The Telegram channel Shot <a href=\"https:\/\/t.me\/shot_shot\/83692\" rel=\"noopener\" target=\"_blank\">reported<\/a> that the disruption forced many Medsi locations to\u00a0stop patient intake, at\u00a0least in\u00a0Moscow.<\/p>\n<p><strong>Transportation and communications<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>AirNet provider.<\/strong> The\u00a0St. Petersburg\u2013based Internet provider <a href=\"https:\/\/t.me\/rotondamedia\/7430\" rel=\"noopener\" target=\"_blank\">reported<\/a> on\u00a0July 30 that its servers had come under a\u00a0DDoS attack carried out by\u00a0Ukrainian hackers from the IT\u00a0Army of\u00a0Ukraine.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Aeroflot airline.<\/strong> The internal systems of\u00a0Russia\u2019s\u00a0largest airline stopped working on\u00a0the morning of\u00a0July 28. Hacker groups from Belarus and Ukraine <a href=\"https:\/\/meduza.io\/en\/feature\/2025\/07\/30\/assessing-aeroflot-s-aftermath\" rel=\"noopener\" target=\"_blank\">claimed<\/a> responsibility.<\/p>\n<p><a data-testid=\"related-rich-block\" class=\"RelatedRichBlock-module_root__-SEe7 RelatedRichBlock-module_isRich__Z2kQ8 RelatedRichBlock-module_hasGradient__s5Krh RelatedRichBlock-module_desktop__EaPOr RelatedRichBlock-module_center__KANd- RelatedRichBlock-module_light__aJLn7\" href=\"https:\/\/meduza.io\/en\/feature\/2025\/07\/31\/a-zoo-of-it-infrastructure\" target=\"_blank\" rel=\"noopener\">A \u2018zoo\u2019 of\u00a0IT\u00a0infrastructure How Aeroflot\u2019s\u00a0slow-moving transition to\u00a0Russian-made software left it\u00a0wide open to\u00a0hackers<\/a><a data-testid=\"related-rich-block\" class=\"RelatedRichBlock-module_root__-SEe7 RelatedRichBlock-module_isRich__Z2kQ8 RelatedRichBlock-module_hasGradient__s5Krh RelatedRichBlock-module_mobile__N-G4U RelatedRichBlock-module_center__KANd- RelatedRichBlock-module_light__aJLn7\" href=\"https:\/\/meduza.io\/en\/feature\/2025\/07\/31\/a-zoo-of-it-infrastructure\" target=\"_blank\" rel=\"noopener\">A \u2018zoo\u2019 of\u00a0IT\u00a0infrastructure How Aeroflot\u2019s\u00a0slow-moving transition to\u00a0Russian-made software left it\u00a0wide open to\u00a0hackers<\/a><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>MTS and other telecom providers.<\/strong> On\u00a0July 4, users <a href=\"https:\/\/t.me\/tvrain\/90795\" rel=\"noopener\" target=\"_blank\">reported<\/a> Internet access issues affecting several major Russian telecom operators. Most complaints concerned\u00a0MTS. The company did not explain the cause of\u00a0the outage.<\/p>\n<p><strong>Banking<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>T-Bank (formerly Tinkoff).<\/strong> Users <a href=\"https:\/\/frankmedia.ru\/212342\" rel=\"noopener\" target=\"_blank\">reported<\/a> service disruptions on\u00a0July 29, with over 1,500 complaints at\u00a0one point. T-Bank acknowledged that \u201csome customers may have experienced difficulties,\u201d but did not specify the reason.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Alfa-Bank.<\/strong> Some users also <a href=\"https:\/\/%D1%81%D0%B1%D0%BE%D0%B9.%D1%80%D1%84\/alfa-bank\" rel=\"noopener\" target=\"_blank\">reported<\/a> issues with Alfa-Bank on\u00a0July 29, although far fewer than with T-Bank. According to\u00a0complaints posted on\u00a0Downdetector, users also had trouble accessing Alfa-Bank services on\u00a0July 24, though the bank said at\u00a0the time that there were no\u00a0outages.<\/p>\n<p><strong>Government services<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Russian Post.<\/strong> Customers <a href=\"https:\/\/t.me\/meduzalive\/130179\" rel=\"noopener\" target=\"_blank\">reported<\/a> service issues on\u00a0July 29. The state postal service <a href=\"https:\/\/www.kp.ru\/online\/news\/6494631\/\" rel=\"noopener\" target=\"_blank\">denied<\/a> the reports, stating: \u201cDon\u2019t panic \u2014 all Russian Post systems are operating normally! Website, mobile app \u2014 everything is\u00a0reliable, secure, and under control.\u201d<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Gosuslugi government services portal.<\/strong> On\u00a0July 28, users in\u00a0several Russian regions were <a href=\"https:\/\/t.me\/msk1_news\/79730\" rel=\"noopener\" target=\"_blank\">unable<\/a> to\u00a0access their personal accounts. Roskomnadzor <a href=\"https:\/\/www.m24.ru\/news\/tehnologii\/28072025\/817447\" rel=\"noopener\" target=\"_blank\">said<\/a> it\u00a0had not recorded any DDoS attacks on\u00a0the portal. The cause of\u00a0the outage remains unclear.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Rosstat.<\/strong> The federal statistics agency\u2019s\u00a0website went <a href=\"https:\/\/frankmedia.ru\/210634?utm_referrer=https%3a%2f%2fwww.google.com%2f\" rel=\"noopener\" target=\"_blank\">offline<\/a> on\u00a0July 16 and was down for several days. On\u00a0July 21, Rosstat <a href=\"https:\/\/t.me\/rosstat_official\/2997\" rel=\"noopener\" target=\"_blank\">announced<\/a> that the site was back online \u2014 though only partially.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>The Central Bank\u2019s\u00a0Faster Payments System.<\/strong> The system<a href=\"https:\/\/www.forbes.ru\/tekhnologii\/541642-v-rabote-sistemy-bystryh-platezej-proizosel-sboj\" rel=\"noopener\" target=\"_blank\"> temporarily<\/a> stopped working on\u00a0July 10. Its operator attributed the outage to\u00a0\u201can\u00a0incident on\u00a0the provider\u2019s\u00a0side.\u201d That same day, users also <a href=\"https:\/\/frankmedia.ru\/209889\" rel=\"noopener\" target=\"_blank\">reported<\/a> access issues at\u00a0Alfa-Bank, Ozon Bank, Yandex Bank, VTB, and Bank Saint Petersburg.<\/p>\n<p><strong>Social media and messaging apps<\/strong><\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>Telegram and WhatsApp.<\/strong> In\u00a0the first week of\u00a0July, Russian users <a href=\"https:\/\/t.me\/thebell_io\/33400\" rel=\"noopener\" target=\"_blank\">noticed<\/a> at\u00a0least four instances when the country\u2019s\u00a0two most popular messaging apps went down simultaneously. Experts suggested Roskomnadzor may have been testing a\u00a0possible block. Shortly afterward, the Russian authorities officially <a href=\"https:\/\/meduza.io\/feature\/2025\/07\/18\/vlasti-rossii-sobirayutsya-zablokirovat-samyy-populyarnyy-messendzher-whatsapp-telegram-sudya-po-vsemu-blokirovki-poka-izbezhit\" rel=\"noopener\" target=\"_blank\">announced<\/a> plans to\u00a0block WhatsApp.<\/p>\n<p class=\"SimpleBlock-module_p__7aRnT  SimpleBlock-module_center__D1CsV\"><strong>VKontakte.<\/strong> On\u00a0July 3, users in\u00a0Russia and abroad began <a href=\"https:\/\/3dnews.ru\/1125361\/vkontakte-perestala-otkrivatsya-v-rossii-i-za-granitsey\" rel=\"noopener\" target=\"_blank\">reporting<\/a> problems accessing the social network. Service was restored within a\u00a0few hours. VKontakte did not explain the cause of\u00a0the outage.<\/p>\n<blockquote class=\"SimpleBlock-module_blockquote__nX-Ab  SimpleBlock-module_center__D1CsV\"><p><strong>We\u00a0usually do\u00a0the talking at\u00a0<a href=\"https:\/\/support.meduza.io\/en?utm_source=meduza_en&amp;utm_medium=intext_insert&amp;utm_campaign=160725\" rel=\"noopener\" target=\"_blank\">fundraisers<\/a>. This time, we\u2019ll\u00a0let our readers speak for us.<\/strong>\u00a0\u201cFor years, Meduza\u2019s\u00a0been one of\u00a0the only news outlets keeping me\u00a0from going nuts. I\u2019m\u00a0still in\u00a0Russia, still holding it\u00a0together, but just barely. I\u00a0know I\u2019m\u00a0not the only\u00a0one. So, please show some love for Meduza and\u00a0<a href=\"https:\/\/support.meduza.io\/en?utm_source=meduza_en&amp;utm_medium=intext_insert&amp;utm_campaign=160725\" rel=\"noopener\" target=\"_blank\">help<\/a>\u00a0keep us\u00a0from going cuckoo!\u201d \u2014 Lyu<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"In\u00a0Russia, Internet outages have become routine. Website crashes and service disruptions are nothing new, either. But the most&hellip;\n","protected":false},"author":2,"featured_media":312976,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3161],"tags":[3082,53,16,15,7888,7883,7886,7875,7868,7880,7870,7881,7887,7876,7864,7871,7865,7873,7874,7866,7869,7867,7885,7879,7872,7884,7882,7878,7877],"class_list":{"0":"post-312975","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-internet","8":"tag-internet","9":"tag-technology","10":"tag-uk","11":"tag-united-kingdom","12":"tag-7888","13":"tag-7883","14":"tag-7886","15":"tag-7875","16":"tag-7868","17":"tag-7880","18":"tag-7870","19":"tag-7881","20":"tag-7887","21":"tag-7876","22":"tag-7864","23":"tag-7871","24":"tag-7865","25":"tag-7873","26":"tag-7874","27":"tag-7866","28":"tag-7869","29":"tag-7867","30":"tag-7885","31":"tag-7879","32":"tag-7872","33":"tag-7884","34":"tag-7882","35":"tag-7878","36":"tag-7877"},"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@uk\/114961475580788586","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/312975","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/comments?post=312975"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/posts\/312975\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media\/312976"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/media?parent=312975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/categories?post=312975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/uk\/wp-json\/wp\/v2\/tags?post=312975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}