Beeline 2019 Data Breach
ObscureIQ Breach Intelligence
Low SeverityWebsite / service breach
Beeline Russian Mobile Operator Breach (2019): 8.1 Million Subscriber Phone Numbers & Home Addresses Exposed from 2016 Legacy Database
Mobile, broadband, and digital communications services.
Verified by ObscureIQ Intelligence
30/100Breach Risk Index
8Data Value
25Market Recency
519dSince Breach
Breach Intelligence Summary
Entity: Beeline · Actor: Unknown · Sources: 2 references
Attack: Database Exposure
Profile: Telecommunications Provider · Mobile, broadband, and digital communications services · National telecom operator · Russia
Timeline: Breach (2019-01-01) · Indexed (Feb 04, 2025) · Year (2019)
Exposure: 8.1M records · 2 fields: Phone Number, Physical Address
Status: Confirmed
Executive Summary
In 2019, a legacy Beeline database (dating to around 2016, from a 2017 breach) was exposed online, compromising roughly 8.1 million customers. Exposed data included full names, home addresses, and phone numbers. Beeline stated the data covered only Russian home-broadband customers who registered before November 2016.
ObscureIQ assessment: Severe risk of SIM swap fraud, phishing, account takeover, and identity theft. Telecom records are high-value because they support both direct fraud and broader account recovery abuse.
Breach Impact
The pairing of names, home addresses, and phone numbers supports identity fraud, physical-location profiling, and targeted scams against affected customers.
About Beeline
Beeline is a major Russian telecommunications brand (operated by VimpelCom), providing mobile and home broadband services.
Why They Hold Your Data
National telecom operators collect subscriber identity, phone numbers, service addresses, billing records, device and SIM data, and account-management information across communications services.
Recent Developments
The exposed dataset was a legacy database of home-broadband customers who signed up before November 2016; it circulated publicly, including on Telegram, in 2019.
Data Points Exposed
2 verified field types
Phone Number
Physical Address High
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Moderate
Primary downstream threats:
- SIM swap attacks where phone numbers are present
- Doxxing risk from physical address exposure
Threat vectors:
- SIM swapping, vishing & SMS phishing
- Physical stalking, mail fraud & identity verification
- Home targeting, stalking & physical threat
Recommended Actions
If you believe your information may be included:
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the Beeline breach?▾
In 2019, a legacy Beeline database (dating to around 2016, from a 2017 breach) was exposed online, compromising roughly 8.1 million customers. Exposed data included full names, home addresses, and phone numbers. Beeline stated the data covered only Russian home-broadband customers who registered…
What data was exposed?▾
Verified fields include Phone Number, Physical Address.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation