Data Leaks Could Become a “Golden Asset” for Cybercriminals in 2026

Analysts are seeing a shift in attackers' priorities: their main goal is no longer immediate financial gain, but the creation of long-term reputational risks for companies. As penalties for compromising personal data increase, hackers are shifting their focus to stealing customer databases and using management’s fear of multimillion-ruble sanctions as the main argument in ransom negotiations.

Timur Dzhafarov, Head of Network Security at Tsikada Holding, commented on the situation and warned companies against a critical mistake: attempting to pay off criminals. Under the new legal framework, such a "deal" may lead to consequences far more severe than even the strictest official penalties.

"Attempting to negotiate with an extortionist is a deal with a knowingly losing outcome, where legal and financial risks far exceed even the most severe fines for a data leak. Beyond the absence of any guarantees, companies may face the risk of account freezes under 115-FZ and direct criminal liability for financing terrorism, given the politicized nature of many attacks. That is why, despite growing regulatory pressure, we do not expect businesses to become widely willing to make concessions to criminals. The cost of such a mistake is too high to risk the future of the entire organization," said Timur Dzhafarov