A Clf09.com (草榴社區) forum leak indexed by leaksear.ch contains roughly 2.5 million records with usernames, email addresses, and hashed passwords. Public records list a Clf09.com leak entry from August 2022, but the intrusion method and official disclosure remain unconfirmed.
A leaksear.ch index of the CDEK breach contains 7,445 records tied to the Russian courier service, with email addresses and names searchable. Public breach trackers describe the wider March 2022 incident as an unverified leak of CDEK customer contact data attributed to the IT Army collective.