Russian Software Firm Kaluga Astral Hit by Cyberattack, Disrupting Critical Business Services Russian software provider Kaluga Astral confirmed a cyberattack earlier this month that disrupted key services for nearly a week, impacting businesses reliant on its tax reporting, electronic document management, and authentication systems. The company, which serves government agencies, banks, and state-owned enterprises including Russian Post and Moscow’s public transport operator stated that recovery efforts prioritized security over speed, delaying full restoration. While Astral’s internal investigation found no evidence of customer data leaks or compromise, the attack caused widespread operational issues. Customers reported interruptions in cash register functionality, restricted sales of regulated goods, and loss of access to corporate portals, email, and digital certificate-based authentication. Russian authorities are involved in the investigation, limiting the company’s public disclosures on the incident’s origin or technical details. This is not the first cybersecurity incident involving Astral. In 2022, the company suffered a DDoS attack that disrupted reporting services, though the perpetrators remain unidentified. Additionally, the IT Army of Ukraine, a hacktivist collective, listed Astral as a target in 2023, though no confirmed breach has been linked to the group in either the previous or current attack. The motive and attribution behind the latest incident remain unclear.