Data of donors to Ukraine fell into the hands of hackers

Hackers have stolen personal data of donors to Ukraine. The Davayte and Ty ne odin charity projects, organized by independent Russian media outlets, have been hacked. Both project teams reported this on September 1.

The Davayte project raises funds for war-torn Ukrainians, while the Ty ne odin marathon is aimed at helping political prisoners in Russia.

According to the projects, cybercriminals managed to gain access to their accounts on August 11 through the integration of the WooCommerce service and the Stripe payment system, which are used for online auctions.

As a result of the attack, the email addresses of some donors were stolen. In some cases, the last four digits of the bank card and the name of the bank that issued the card also fell into the hands of hackers. After that, unauthorized access to the data was blocked.

The project teams emphasize that the full payment data did not fall into the hands of cybercriminals. Also, no fraudulent transactions related to user accounts were recorded in the Stripe system.

It is not yet clear who carried out the attack. The project teams do not exclude the possibility that Russian security forces were behind the cyberattack, but no evidence has been provided for this assumption.

“Davayte” is a joint charity project organized by “Sluzhba podderzhki”, “Meduza” and “Dozhd”. These organizations are declared “undesirable organizations” in Russia. According to the project, so far 292 thousand Ukrainians have been provided with assistance.

The “Ty ne odin” charity marathon was also organized by these organizations, as well as “Mediazona” and structures associated with the Anti-Corruption Foundation founded by Alexei Navalny. According to the project report, in 2024 the marathon raised more than 45 million rubles - approximately 448,000 euros - to support political prisoners in Russia.