Russian authorities have detained three people allegedly linked to the hacking group DataSuckers, following a breach at the Dodo Pizza restaurant chain. A Moscow court placed 19-year-old Denis Fridman under house arrest until December 8 on charges connected to the illegal handling of computer information containing personal data. Two other suspects are in custody, and a fourth remains at large, according to Russian media reports cited by Recorded Future News.
The investigation reportedly began after Fridman accidentally exposed his IP address while accessing stolen Dodo Pizza data, allowing police to trace him to Barnaul. The attack is said to have started with Dodo Pizza corporate credentials found on GitHub, which gave the attackers access to interconnected systems, including cloud storage and databases. Kommersant reported that the stolen database was offered for sale on the dark web and that the hackers received $100,000, transferred to a shared cryptocurrency wallet whose password was changed after Fridman's arrest. Recorded Future News noted it could not independently verify how Russian law enforcement identified the suspects.
DataSuckers has in recent months claimed responsibility for attacks on Tez Tour, a Russian tour operator, and ATB, Ukraine's largest grocery chain. Those companies disputed that customer information was compromised, while the group said it obtained millions of records. The group describes itself as financially motivated rather than politically aligned and communicates mainly in Russian on Telegram. Last weekend, DataSuckers said it would continue operations but reduce public activity; no further messages have appeared on its channel since then.