VKontakte, Russia's largest social network, suffered a credential-theft breach around late 2012 that exposed approximately 93 million user accounts. The intrusion went undetected for nearly four years before surfacing on 5 June 2016, when a hacker known as "Peace" listed the stolen data for sale on a Tor-based dark web marketplace for 1 Bitcoin. The breach is attributed to a misconfiguration that allowed direct access to user account data. The exposed data included full names, email addresses, phone numbers, and passwords. The passwords were stored using unsalted MD5 hashing, an extremely weak protection that researchers at LeakedSource cracked at a rate of roughly 90 percent within three hours of obtaining the dataset. This made the credentials immediately usable. The dump quickly circulated across criminal forums, where attackers used the email-and-password pairs in credential-stuffing attacks targeting platforms including Gmail, PayPal, and Steam, and bundled them into phishing and spam toolkits. No major regulatory action has been publicly documented in connection with this breach. VK responded by forcing password resets for affected accounts. Affected individuals face lasting risk: even years after the fact, these credentials remain in active circulation on criminal networks. Anyone who used the same password on VK as on other services should treat those accounts as compromised and update them immediately.

Social-media platforms collect user identity, contact details, messages, social graphs, posts, media uploads, behavioral signals, and account records across large communication ecosystems.

VK has operated under sustained western sanctions and geopolitical pressure following Russia's invasion of Ukraine in 2022, limiting its partnerships and investment options in European and American markets. The company has continued expanding domestic Russian digital services and has been associated with compliance with Russian state data localization laws. International growth has effectively stalled. No major structural or ownership changes have been reported in the most recent period.