Adversary Intelligence — 2026-10-28

FSB Department K Employee Convicted of Stealing Classified Database and Sentenced to 13 Years

BLUFNesterov's conviction reveals a systemic insider-threat gap in Russia's security services that periodic prosecutions alone will not close, as accomplice networks remain unaddressed.

Khimki City Court sentenced Anton Nesterov, a former senior operative of the Interior Ministry's Bureau of Special Technical Measures, to 13 years in a strict-regime colony on September 10, Kommersant and Life.ru reported, citing RBC sources 12. He was convicted of bribe-taking, exceeding authority and unlawful access to computer information 13. Prosecutors say he copied a classified database at the ministry's Bolshaya Lubyanka building in early 2025 and advertised it online 12. The Insider reported that the buyer offered 9 million rubles and that the database held compromising material on Finance Ministry, Central Bank and state bank leadership 4. Sources differ on whether the buyer obtained the data. Kommersant says FSB officers detained the hacker first, and he later testified and had his case dropped 1. The Insider cites a version in which he completed the purchase before detention 4. Nesterov was detained on May 21, 2025 2.

Analysis
Interior Ministry operatives embedded with the FSB can copy classified financial-sector material and market it online, and this case surfaced only because the buyer reportedly cooperated with investigators. The Insider's account that the buyer was a Department K informant, and that the PIK bribery and DDoS episode was left out of the charges, indicates the court record covers less than the investigation examined. Prosecutors may instead have deliberately narrowed the case to a tidy corruption prosecution, shielding the wider FSB and Bureau network. Nesterov's refusal to name accomplices leaves any such contacts unaddressed, and further personnel action against Bureau leadership would show whether the inquiry widens. Whether the buyer obtained the data is contested, so the database's exposure cannot be determined. Confidence is high in the conviction and sentence, which rest on court-docket reporting relayed by several outlets that all trace to one RBC source. Confidence is lower on the buyer's role, which rests on The Insider's single account.

4 sources