CDEK (unverified) – 19,218,203 breached accounts

In early 2022, a collective known as IT Army whose stated goal is to “completely de-anonymise most Russian users by leaking hundreds of gigabytes of databases” published over 30GB of data allegedly sourced from Russian courier service CDEK. The data contained over 19M unique email addresses along with names and phone numbers. The authenticity of the breach could not be independently established and has been flagged as “unverfieid”.