Internal Staff Data from MVVDMebel.ru Leaked

Data Breach Summary

A data breach has exposed the internal database of the Russian online furniture store mvvdmebel.ru, with 23.9MB of sensitive CSV data leaked by a user known as RL000 on DarkForums.st in July 2025. The dataset includes detailed staff information, including names, email addresses, mobile and work phone numbers, internal IDs, roles, departments, registration dates, and additional personal and professional data.

Where and How?

The leak was identified on a well-known dark web forum, where a CSV-format file was shared publicly. The sample reveals detailed employee records such as:

• Full names and contact details
• Positions (e.g., Executive Director, Call Center Operator)
• Registration and activity timestamps
• Potentially sensitive business communication details like Skype, Zoom, LinkedIn, and more

This level of internal exposure significantly increases risks for both corporate exploitation and personal identity theft of employees.

Company Data Breach History

There is no previously known breach involving mvvdmebel.ru, making this incident the first documented case. However, the depth of internal data leaked suggests a severe vulnerability in the company’s data management and access protocols.

Recommendations for Affected Individuals

• Immediately change all associated work and personal account passwords.
• Be alert for phishing emails and phone scams, particularly those impersonating company officials.
• Monitor social media and professional networks for suspicious connections.
• Consider notifying company leadership to ensure awareness and action.

Security Recommendations for Organizations

• Perform a comprehensive audit of internal access control policies.
• Encrypt internal communication and employee data at rest and in transit.
• Monitor employee endpoints for unauthorized activity.
• Train staff on data handling best practices and breach response.

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.