Armenia Under Siege: Hacker Claims Sale of 8 Million Government Records

Disclosures regarding the illicit sale of a database purportedly linked to Armenia’s state postal and notification services have surfaced on a cybercriminal forum, according to reports from Daily Dark Web. The perpetrators assert that the repository comprises approximately 8 million records associated with official government mandates, encompassing communications from the Compulsory Enforcement Service, the Patrol Police, and various judicial bodies. The vendor has valued this compendium of state dispatches at $2,500; however, as of this moment, these claims remain unverified by independent forensic observers.

Armenian authorities moved expeditiously to rebuff these reports, issuing a public denial of any breach concerning the central government email infrastructure. Official communiqués emphasize that the leak does not originate from state postal foundations. Preliminary assessments suggest that the exfiltrated files may instead have been derived from the electronic civil litigation platform, cabinet.armlex.am. A rigorous internal inquiry is currently underway to authenticate the data’s provenance and elucidate the methodology of its extraction.

Regardless of the technical intricacies, the potential ramifications for the citizenry are profound. Repositories associated with official notifications typically harbor sensitive details such as names, contact information, case numbers, and particulars regarding fines or judicial proceedings. Should such intelligence fall into malicious hands, it facilitates a theater for targeted phishing, extortion, and disinformation campaigns meticulously camouflaged as sovereign mandates.

Investigative attention has converged upon the suspected vendor, an operative known as dk0m. This figure has maintained a formidable reputation within the cybercriminal underworld since 2024, specializing in the commodification of state-affiliated data. Distinguishing himself from politically motivated hacktivists, dk0m is driven exclusively by pecuniary gain. His modus operandi frequently involves the utilization of infostealer logs to harvest stored credentials and session cookies from compromised browsers, which are subsequently filtered for access to governmental portals. Previously, this actor has been linked to the sale of ministerial data from Argentina, Ukraine, and Brazil, often substantiated by the publication of persuasive evidentiary samples.

This situation is exacerbated by a volatile geopolitical and cybersecurity climate. For several years, Armenia has navigated a perilous digital landscape where the interests of cyber-syndicates, intelligence apparatuses, and hacktivists intersect. While the government may rightfully dismiss the notion of a central email breach, their acknowledgement of a potential leak within auxiliary segments of the digital ecosystem offers little solace to the public. If this database proves authentic, its true value resides in the inherent trust commanded by its content. Information pertaining to the judiciary and law enforcement significantly empowers social engineering; recipients are far more likely to succumb to panic or ill-advised actions when confronted with authentic case numbers and fines, ultimately undermining the sanctity of the digital state.