Russian satellite operator Dozor-Teleport knocked offline in June 2023 hack

Organization
Dozor-Teleport CJSC
Exploit
Hacking
Industry
Telecommunications

Dozor-Teleport, a Russian satellite communications operator, was knocked offline on June 29, 2023 in an attack that its general director, Alexander Anosov, confirmed had hit the company's cloud infrastructure. The provider carries traffic for Russian state bodies including the FSB, as well as for energy firms such as Gazprom and Rosatom and for remote military and industrial sites. Its parent company, Amtel Svyaz, also suffered significant outages.

The attackers posted roughly 700 files, a mix of documents and images, to a leak site and a newly created Telegram channel. One document was said to describe an arrangement giving Russian security services access to subscriber information. Several company websites were defaced with messages and video referencing the Wagner mercenary group, whose short-lived mutiny had taken place days earlier.

The Telegram account that claimed the attack, calling itself "Richard W", had been created a day before it happened, and no established Wagner channel amplified it. Analysts at the time treated the Wagner branding with skepticism and suggested a Ukrainian operation using a false flag.

Anosov estimated that restoring the network to full operation could take up to two weeks. Other assessments put core network recovery at days to weeks and full restoration at several months. The attackers also claimed to have damaged satellite terminals and destroyed data held on company servers.

In August 2025 the Ukrainian Cyber Alliance publicly claimed the operation, saying it had disabled more than 3,000 ground stations and had used the Wagner framing to obscure its involvement.

Sources