Russia’s probiv market: leaked lives for sale

Sunday 28 December 2025

In contemporary Russia there exists a parallel information economy known colloquially as the probiv market. The verb probit', literally ‘to punch through’, has come to mean the illicit extraction of personal data from protected databases. What began in the 1990s as a marginal criminal practice has, over the past two decades, evolved into a semi-institutionalised market in which private individuals, businesses, journalists, criminals and, at times, the state itself trade in intimate digital biographies of ordinary citizens.

At its core, the probiv market is about access. Russia’s public and private sectors are heavily digitised, but unevenly secured. Vast databases exist for passports, internal residence registration, vehicle ownership, tax records, medical histories, mobile phone metadata and banking transactions. Many are nominally protected by law; few are truly insulated from insiders with a username, a password and an incentive.

How probiv works

Most probiv transactions are not sophisticated cyber intrusions. They are acts of betrayal rather than hacking. A clerk at a regional traffic police office sells vehicle registration details (many details of which are already on public Russian databases accessible on the internet); a mobile network employee extracts call records; a bank compliance officer leaks account balances; a municipal housing official discloses ownership records. These insiders are paid modest sums, often equivalent to a week or a month’s salary, in exchange for a single query or batch of records.

Brokers sit between these insiders and customers. They advertise discreetly on encrypted messaging platforms and semi-private forums, offering services that range from identifying the owner of a telephone number to producing a complete dossier on an individual: passport scans, home address, relatives, travel history, employment, debts and even medical diagnoses. Prices vary according to sensitivity. Basic identification data can cost a few dollars; financial or health information commands much higher fees.

The technical barrier to entry is low. The moral and legal barrier is, in practice, lower still.

Telegram, normalisation and scale

The migration of probiv services onto Telegram has been decisive. Hundreds of Russian-language channels openly advertise data ‘checks’, using euphemistic language and disclaimers that strain credulity. The interface is familiar, payments are frictionless and customer reviews lend a veneer of legitimacy. What was once an underworld practice has become normalised, even banal.

This normalisation has expanded the customer base. Jealous spouses, business competitors, debt collectors, local journalists and private investigators all make use of probiv services. In some regions it is quietly understood that certain disputes are resolved not through courts but through information asymmetry created by leaked data.

The scale is difficult to measure, but periodic mass leaks provide a glimpse. Databases containing tens of millions of Russian citizens’ records have surfaced repeatedly on criminal forums and in investigative journalism. Each leak feeds the probiv ecosystem, lowering costs and broadening access further.

The ambiguous role of the state

Russia’s relationship with the probiv market is deliberately ambiguous. Formally the trade in personal data is illegal, and occasional prosecutions are publicised. In practice, enforcement is selective. Small brokers are sometimes sacrificed; systemic vulnerabilities are rarely addressed.

This ambiguity serves state interests. Russian security services, including the Federal Security Service, possess extensive lawful and extra-legal access to personal data. Yet the existence of a thriving grey market allows deniability. Information can be obtained indirectly, without paper trails, warrants or internal accountability. The same mechanisms that enable private probiv transactions can be repurposed for political surveillance, pressure or recruitment into the security services.

At the same time the state tolerates probiv because it reflects deeper structural realities: low public-sector wages, weak institutional ethics and a culture in which loyalty to networks often outweighs loyalty to abstract legal norms. To eradicate probiv would require reforms that go far beyond cyber security.

Consequences for society

The social consequences are corrosive. Privacy in Russia is not merely fragile; it is transactional. Citizens assume, often correctly, that their personal details can be bought. This erodes trust in institutions, discourages whistle-blowing and deepens cynicism about the rule of law.

For journalists and activists, probiv is a double-edged sword. Investigative reporting has at times relied on leaked databases to expose corruption and hidden wealth. Yet the same tools are used to intimidate reporters, identify sources and facilitate harassment. The boundary between public interest and personal vulnerability becomes blurred.

Commercially, the probiv market distorts competition. Businesses obtain confidential information about rivals or clients; disputes are settled through exposure rather than adjudication. The market rewards those willing to exploit illegality and punishes those who rely on formal processes.

International implications

Russia’s probiv systems do not stop at her borders. Leaked Russian databases often contain information on foreign citizens: expatriates, travellers, investors and diplomats. These datasets circulate globally, feeding identity fraud, espionage and transnational crime. Western sanctions and travel restrictions have increased the intelligence value of such data, making probiv a matter of international security rather than merely domestic criminality.

Moreover the tolerance of probiv at home sits alongside aggressive cyber operations abroad. The contrast is instructive. Where data leaks weaken Russian society internally, they are endured; where they can be weaponised externally, they are cultivated.

A market without an end

The probiv market persists because it aligns with incentives at every level. Insiders earn supplemental income; brokers profit; customers gain leverage; the state acquires flexibility and deniability. The losers are diffuse and largely voiceless: ordinary citizens whose lives are rendered transparent without consent.

In this sense, probiv is not an aberration but a symptom. It reflects a political economy in which information is power, law is negotiable and personal data is a commodity. Until those underlying conditions change, Russia’s leaked lives will continue to circulate, quietly bought and sold, one punched-through database at a time.