Poryadok Hack Shuts Russian Home Goods Stores

Poryadok, a Russian chain selling goods for the home and dacha, says a hacker attack lies behind the closure of its shops and the failure of its website and app that began last weekend. The company made the admission in a pinned post on its official VK page on 28 October, three days after it first told customers that its stores were shut “for technical reasons”.

On 30 October the company website still carried a notice saying some stores were temporarily closed, orders were delayed and loyalty bonuses could not be seen in the app. The company has not said who attacked it, how, or whether any customer data was taken, and it has given no date for a full recovery. The quotes below are TSN translations from the Russian.

What Poryadok has told its customers

The first notice appeared on VK, Russia’s largest social network, on Sunday 25 October. “For technical reasons, the Poryadok website and app are working unstably, and retail stores are closed for now,” it said, adding that the company was working to reopen its doors and restore its online services as soon as possible.

The explanation came three days later. “We have encountered a hacker attack, but we are already actively restoring our services and gradually returning everything to normal,” the 28 October post said. It promised that “very soon” the stores would work at full capacity again, that data on customers’ orders would be restored and that loyalty programme bonuses would “return to their places”. It asked customers to “be a little patient” and said the company would keep them updated.

The banner now on the company’s website uses different words. It describes “a technical failure” rather than an attack, and says “some of the stores” are temporarily closed, orders are delayed and bonuses are not visible in the app. “We are working on restoration,” it ends.

Taken together, the two channels confirm three effects: shops closed, orders held up and the loyalty scheme unavailable. The VK post also indicates that order data needs to be rebuilt, since it promises that the data “will be restored”.

A regional home goods chain with 48 stores

The chain was founded in Voronezh in 2010 and operates 48 stores in 32 Russian cities, according to The Record and the regional site 76-region.ru. The local press reports that the chain trades through a company called OOO Spektr and that 2025 revenue was about 12 billion roubles, citing the Kontur.Fokus company database; Voronezh1 gives the same source’s figure as almost 11.9 billion roubles.

Voronezh1 said one of the city’s stores had been shut behind roller shutters with a notice about technical problems, and that none of the phone numbers on the notice answered. The Record reported that customers had been unable to collect paid-for orders, arrange returns or reach the hotline, and that user reports on the outage tracker DownRadar showed online services still down on Friday. AiF Chernozemye reported on 30 October that stores in Lipetsk and other cities in the region were recovering, while problems with the app and sites persisted.

Poryadok’s notices cover the shops but not the data

The retailer has confirmed the cause and the symptoms of its outage, and little else. The company’s own posts establish that this was an attack, that it reached systems running stores, orders and the loyalty scheme, and that recovery is still partial. Neither post says whether customer data left the company, and nothing in either channel answers that question in either direction.

That gap matters more than the shutters. The promise to restore order data shows those records were affected in some way, but “restored” is not the same as “safe”, and the loyalty programme is a customer database as well as a discount scheme. Western retailers hit in recent weeks set out the same split between disruption and data: Ahold Delhaize said it had no evidence that sensitive data was taken, and TFG London said it was still investigating. The home goods chain has made no statement either way.

The wording also shifted between channels. VK calls it a hacker attack; the website banner calls it a technical failure. Both can be true, but customers reading only the site would not learn the cause. Closer to home, Russian hosting firm FirstVDS listed what attackers had copied from customer servers this month; the retailer has offered no comparable account.

The plainest public gauge of its recovery is the website banner, which on 30 October still said that some shops were shut and that bonuses could not be seen in the app.