Hacker Claims Full Breach of Russia’s Max Messenger, Threatens Public Leak

Alleged major breach of Max Messenger: an actor calling themselves CamelliaBtw claims they exfiltrated the full production environment (~142 GB) — including ~15.4M user records, active auth tokens (bypassing 2FA), bcrypt passwords, communication metadata, unencrypted media, SSH keys, S3 configs, and backend source code — via a claimed RCE in the media processing engine and is threatening to publish data unless paid within 24 hours; Max has not confirmed the incident and no sample data has been independently verified.