Russia

October 22, 2025

Rosselkhoznadzor’s digital systems (including VetIS and its Mercury platform) were targeted by a large‑scale DDoS attack beginning on October 22, 2025, which disrupted food shipments and the issuance of electronic veterinary certificates for meat, dairy and baby food products. The production movement was paralyzed for half of the day, one company manager said, adding that the lack of an emergency procedure allowing shipments without digital paperwork led to financial losses. Rosselkhoznadzor denied reports of prolonged disruptions, saying that the Mercury system was operating “as usual.”

In June 2025, a similar incident forced dairy producers to revert to paper-based certification, creating logistical chaos.

June 18, 2025

A cyberattack disrupted Russia’s dairy supply by taking offline the Mercury veterinary certification system, a government platform required to authorize the movement of animal-based products. The outage prevented producers from issuing mandatory electronic certificates, forcing a temporary switch to paper documentation. The workaround led to delays as many warehouses and retailers refused shipments without digital verification, causing logistical bottlenecks and supply interruptions.

The broader food supply chain was affected by the attack: dairy producers, livestock product suppliers, logistics operators and major retailers such as Lenta, Miratorg and Yandex Lavka, which were unable to issue mandatory electronic veterinary certificates and thus saw deliveries delayed or halted.

May 3, 2022

A volunteer hacker group coordinated by Ukraine successfully disrupted aspects of the Russian alcohol industry by targeting EGAIS, a government-run digital accounting system for tracking alcohol production and sales in Russia. Several private companies reported operational disruptions because EGAIS was unavailable.

-The glitch resulted in the suspension of operations at the Moscow Brewing Company. The MPC plant, with a capacity of 80 million decaliters per year and bottling approximately 90,000 cans per hour, suspended production on May 5.
-Fort (a wine trading company) — reportedly failed to upload about 70% of its transaction invoices during the outage, causing shipment delays.
-Ladoga — another wine producer/distributor, also experienced significant backlogs in processing documents.
-Other market participants have anonymously reported production shutdowns.

July 14, 2025

Ransomware attack caused more than 2,000 WineLab liquor stores across Russia to shut for three days. The attack hit their parent company Novabev Group. The group is one of Russia’s largest alcohol producers. Signs on WineLab doors said the stores were closed due to “technical issues.”

The attack crippled parts of the Novabev Group’s infrastructure, affecting WineLab’s point-of-sale systems and online services. The Novabev Group refused to negotiate with the attackers. Their internal IT team is working “around the clock” to restore operations and strengthen defenses against future threats.

Forbes Russia estimated lost revenue 200 million to 300 million rubles/day ($2.6 million to $3.8 million)for WineLab Cybersecurity experts interviewed by Forbes could not recall a comparable case in which a major Russian retail chain was forced to shut down entirely due to a cyberattack.