Documents found on an unprotected backup drive of a Nokia Networks employee shed light on Russia's secret network surveillance system, known as SORM
collecting calls, messages, and data — on the country's largest cell network. https://techcrunch.com/...
TechCrunchZack Whittaker
Context & Ripple Effects
This 2019 report was the first detailed public look inside SORM, Russia's lawful-intercept apparatus, courtesy not of official transparency but of a Nokia Networks employee's unprotected backup drive. It sat alone until the 2022 leak of Nokia equipment documents named MTS explicitly and showed how deeply the vendor's gear was wired into the FSB-run tap infrastructure.
Nokia Networks is left answering for an employee keeping SORM integration material on an unsecured consumer-grade drive, exactly when the vendor's role in Russia's intercept build-out was otherwise undocumented.
Security researchers gained a technical map of how SORM attaches to a major mobile operator, converting a rumor-level system into something testable and citable.
Second-order effects
Western network equipment vendors selling into surveillance-heavy jurisdictions face sharper due-diligence questions from customers and regulators about what local intercept mandates their gear must satisfy — pressure the 2022 Nokia-MTS leak amplified rather than resolved.
If the pattern holds, state interception will keep getting documented by vendor accidents instead of government disclosure, making carrier-integrated surveillance a de facto audit target and raising the liability calculus for multinationals supplying such markets.
Structurally, the corpus points toward interception becoming a standard embedded layer of national network procurement — the 'sovereign substrate' model — with vendor secrecy as the only shield, and one that has repeatedly failed.
The trend: State surveillance infrastructure is increasingly exposed not by official disclosure but by leaks from the vendors and contractors who build it, forcing accountability onto companies like Nokia rather than governments.
Security nightmare (and bad look for contractor Nokia). Leak exposes setup of Russia's SORM Internet surveillance network including hardware, personnel, credentials, and law enforcement access. Could help third parties breach invasive surveillance network. https://www.upguard.com…
Westerners signing petitions in support of Moscow's jailed protesters should consider turning their attention to issues like this. https://twitter.com/...
Data leak exposes how @nokia facilitates Russia's bulk wiretapping (SORM) by selling equipment to local telecoms. The company's chief marketing officer refuses to tell @TechCrunch if Russia is considered a human-rights risk. https://techcrunch.com/...
A storage device containing 1.7 terabytes of info detailing telecomm infrastructure throughout the RU Federation was breached including SORM, the system by which telecomms can be intercepted and inspected by the FSB and other law enforcement agencies. https://www.upguard.com/...
UpGuard can now disclose a data breach that compromised the security of Russian telecommunications infrastructure. This breach includes details of the FSB's “SORM” surveillance system. Our report: https://www.upguard.com/...
Read @VickerySec latest blockbuster Kremlin hack :) “the data set includes photographs and installation instructions for SORM, the hardware which enables communication interception and review by Russian law enforcement agencies such as the FSB.” https://www.upguard.com/...
Congratulations 🍾🎈🎊🎉 to @VickerySec - I hope that “ambitious adversaries” were able “to seek ways in which to go from digital compromise to physical facility harm” because this “initial roadmap” is exactly what we need right now “toward that goal” of kicking Putin's ass. 🍻 https:…
The latest @UpGuard find represents a compromise of the security and integrity of nation-wide Russian Federation telecommunications infrastructure. Even details of the FSB's “SORM” surveillance system are present: https://www.upguard.com/...
An interesting nugget from my report. Nokia checks a list of countries deemed “high-risk” on human rights matters before it sells equipment that could be used for surveillance. A Nokia executive, when pressed, refused to say if Russia was on that list. https://techcrunch.com/...
New: Documents reveal how Russia's security services conducts surveillance — collecting calls, messages, and data — on the country's largest cell network. https://techcrunch.com/...