Ukrainian hacktivist team Cyber Resistance hacked the email boxes of Andrey Lugovoy, First Deputy Chairman of the State Duma Committee on Security and Corruption Control, and his entourage. The materials of Lugovoy’s correspondence, parliamentary inquiries and other data were exclusively handed over by the hackers for analysis to the volunteers of InformNapalm international intelligence community.
Andrey Lugovoy was born in Baku on 09/19/1966 in a family of military officers. In 1987 he graduated from the Moscow Higher Military Command School, and was assigned to the Kremlin Regiment. The regiment was subordinate to the 9th Directorate of the KGB (state guard). In 1990 he took the Higher KGB Courses of Military Counter-Intelligence. From 1991 to 1996, he served at the Federal Protective Service of Russia and the Security Service of the President of the Russian Federation. He guarded the top Russian state officials. It is also known that in 2004 a Russian court sentenced Lugovoy to 14 months in prison for organizing the flight of Nikolai Glushkov (one of Boris Berezovsky’s employees). After serving his prison term, Lugovoy became a businessman. He headed the Ninth Wave group of security firms which provided protection to members of Boris Berezovsky family. In 2006, in London, Lugovoy carried out the poisoning of Alexander Litvinenko with polonium-210. According to the verdict issued by the ECHR in Strasbourg, he was named as the actual perpetrator of the Litvinenko murder. In January 2016, British investigators said that Litvinenko’s murder was likely sanctioned by Russian President Vladimir Putin and then FSB director Nikolai Patrushev.
In 2017, the United States added Lugovoy on the Magnitsky sanctions list. According to the official website of the National Agency on Corruption Prevention of Ukraine, Lugovoy, in addition to the US sanctions, is now also under the sanctions from the EU, Canada, Switzerland, Australia, New Zealand and Ukraine.
According to the official data of the Russian State Duma website, Lugovoy currently holds the following positions:
- Deputy Chairman of the State Duma Commission of the Federal Assembly on Investigation of Facts of Interference by Foreign States in the Russia’s Internal Affairs;
- Member of the State Duma Commission on review of the Federal budget expenditures for national defense, national security and law-enforcement activity;
- First Deputy Chairman of the State Duma Committee on Security and Corruption Control.
Member of parliament Lugovoy, as a statesman and Russian propagandist, attracted the attention of the hacktivists by his provocative comments on the scandalous adoption of the so-called Law on Electronic Draft Notices on April 11, 2023. He also actively lobbied for imposing restrictions on the Russian citizens who do not want to participate in the war against Ukraine and receive draft notices.
Hacking of Lugovoy and his entourage
Ukrainian hackers gained access to the mailboxes of Lugovoy and his family, as well as to the mailbox of his office. For the sake of brevity, we will show in this publication only some personal documents relating to Andrey Lugovoy and his legislative activities, as well as reveal facts about his family’s recent expensive trips to the Seychelles, probably not only for recreation reasons, but also to open offshore accounts to withdraw funds from Russia. We will also touch on a sensitive personal topic for Lugovoy and the diagnosis that he was given in early April.
Lugovoy Andrei Konstantinovich, date of birth September 19, 1966, passport of the Russian Federation: 45 11 282676, current address of registration and residence: Moscow, Lyalin lane, 7/2, building 1, apt. 20.
Here are links to scanned copies of financial documents:
- Income and property declaration of Lugovoy and his family members for 2022, signed on March 22, 2023 (PDF)
- Wife’s bank accounts statement as of March 14, 2023 (PDF)
- Income statement of BES LLC [Rus.: ООО “БЭС”] for 2021 (PDF).
- Expert valuation of BES LLC (PDF)
- Company extract for BES LLC (PDF)
In the declaration for 2022, we see that Lugovoy received an income of 8 million rubles, whereas his wife had an income of 34 million rubles. It turns out that she is the “main breadwinner” in the family.
This income mainly comes from the sale of electricity in the Russian Irkutsk region by the Bratsk Electric Networks (BES) partly owned by Lugovoy’s wife. It is difficult to assess the dividends Ksenia Lugovaya would have received if in 2018 she had not transferred a stake of almost 111,000 shares in the BES for 85 million rubles “into the ownership” of Andrey Andreyevich Agafonov (PDF).
In Lugovoy’s mail dump we also found his powers of attorney in the name Agafonov (PDF) which gives us grounds to believe that Agafonov is at least Lugovoy’s business partner, and more probably his shadow purse to hide income and capital.
But the fact that his wife and business partner benefit from the sale of electricity in the Irkutsk region essentially explains why Lugovoy is now actively lobbying for the adoption of a law on cryptocurrencies in Russia. On April 28, 2023, Parliamentary Gazette published a long interview about his cryptocurrency mining bill.
He has electricity which is necessary for mining. A lot of electricity means a lot of crypto coins, and thus even more dividends from the BES.
Another chance to reinvest in some other “profitable business”. As, for example, in 2018, when the Lugovoys were looking for real estate in Moscow. The real estate worth far more than the combined annual income of a member of the State Security and Corruption Control Committee and his wife.
Lugovoy’s parliamentary inquiries
MP’s inquiries and denunciations disguised as inquiries made in plenty by Lugovoy deserve some special attention. Here, for example, is a request dated March 21, 2023 (PDF) for “charitable support” in the amount of 5 million rubles for the construction of a monument. Or a inquiry to the prosecutor’s office dated February 13, 2023 (PDF) demanding to check the activities of the women’s public association Soft Power, which allegedly “incites Russians to protest” against the “special military operation” in Ukraine. And here is an inquiry to the Prosecutor General dated December 06, 2022 (PDF) with a demand to designate the Freedom of Russia Legion as an extremist organization and ban their symbols. Also interesting is the request dated April 07, 2023 (PDF) about awarding Z-volunteers with departmental awards of the Russian Ministry of Defense, listing the aid that they collected for the 58th Russian Army fighting in the Zaporizhia area in Ukraine.
We also add a list of Lugovoy’s denunciations made in the form of parliamentary inquiries:
- Denunciation of the organization Public Commission to Protect the Legacy of Andrei Sakharov dated December 12, 2022 (PDF)
- Denunciation of the organization Privolzhsky Migration Center dated December 08, 2022 (PDF)
- Denunciation of the organization Polish Association Polaros (PDF) dated November 09, 2022
- Denunciation of a Russian citizen Vera Polozkova after her interview to Yuriy Dud (PDF) dated December 19, 2022
- Denunciation of Russian citizen Valery Meladze (PDF) dated January 09, 2023
- Denunciation of a British citizen Christopher Nigel Donnelly dated November 07, 2022 (PDF)
- Denunciation of bloggers who participated in the advertisement of the clothing brand Stoneedge (PDF) dated April 06, 2023
- Denunciation of the Auchan supermarket chain about a tax evasion scheme in the Russian Federation (PDF) dated March 01, 2023.
- Denunciation of the organization Crew Against Torture (PDF) dated January 10, 2023
This is only a small but revealing overview of Lugovoy’s MP activity in the field of denunciations to the Russian prosecutor’s office of various public associations and individual citizens suspected of disloyalty to the Putin regime. However, it’s time to move on to the next chapter.
Lugovaya Ksenia Alekseevna, born July 26, 1989. Russian passport: #4512 892921. Current address of registration and residence: Moscow, Lyalin lane, 7/2, building 1, apt. 20.
It is known from the e-mail correspondence that in the period from March 4 to March 14, 2023, Ksenia Lugovaya visited the Seychelles. This is evidenced by the bookings of hotel and helicopter transfers, which were mailed her by Lugovoy’s assistant.
- Passenger Itinerary LUGOVAYA (PDF)
- Passenger Itinerary – Lugovaya x 3 (PDF)
- CLS voucher LUGOVAYA (PDF)
- FSS voucher LUGOVAYA (PDF)
InformNapalm OSINT researchers also managed to check and confirm through social media search that Ksenia Lugovaya did visit the Seychelles during this period.
Open sources show that Ksenia Lugovaya, married to Andrei Lugovoi since 2012 (by the way, she is younger than his two daughters from the first marriage), has been trying herself out as an artist since 2018, performing under the pseudonym KAYA. She runs an active account on Instagram, a social network banned in Russia.
(On March 14, 2022, Roskomnadzor officially listed Instagram among the sites banned in the Russian Federation. In addition, this social network is recognized as “extremist”. That is, users who post links to pages or the logo of this social network can be indicted under Art. 20.3 of the Code of Administrative Offenses of the Russian Federation (demonstration of extremist symbols), and face a fine or up to 15 days of arrest)
Between March 8 and 12, Ksenia Lugovaya posted several photos and videos from the Seychelles on her Instagram page.
Between March 8 and 12, Ksenia Lugovaya posted several photos and videos from the Seychelles on her Instagram page.
Of course, a wife of the Deputy Chairman of the State Duma Committee on Security and Corruption Control taking a Seychelles vacation does not constitute a proof of economic crimes. However, it looks suspicious that right on the day of her departure from the islands on March 14, 2023, she took a statement of her accounts. It is possible that in addition to recreation, her family task was to resolve certain financial issues outside of the Russian Federation. As evidenced by the story of the former member of the State Duma Semyon Bagdasarov (who is, like Lugovoy, a frequent guest on Vladimir Solovyov’s propaganda talk shows), Russian politicians and propagandists campaign from TV screens that it is the highest honor to die for Russia in Ukraine and that every Russian must hate the West. But at a closer look, each of them has offshore accounts or real estate abroad.
And now let’s get back to the story of the poisoning of Alexander Litvinenko. Apparetnly, the special operation with polonium-210 caught up with the health of Andrey Lugovoy, after all. It is believed that small doses of polonium-210 can cause cancer in the human body. According to the e-mailed medical report dated April 5, 2023, a case conference in Moscow diagnosed him with: “C61 – Malignant neoplasm of the prostate” (stage II prostate cancer, T2aN0M0). The medics suggested a surgical intervention, but, according to the information from the record, the patient refused the surgery and radiation therapy in writing.
Public and non-public activities of Lugovoy as a member of the Russian State Duma, his participation in Solovyov’s propaganda talk shows, his role in the ordered killing of Litvinenko, numerous denunciations and other activities, of course, put him on a par with other Russian war criminals, who must be held accountable by an international tribunal. It is known that back in the day a key role in identifying the bodies of Hitler and other top brass of the Third Reich was played by the dental matching. We are also well prepared to identify Lugovoy’s remains – we have an x-ray of his jaws (PDF).
This is but a fraction of materials that the Ukrainian hacktivists managed to retrieve. These are the documents that the hacktivists allowed us to publish. The lion’s share of the materials obtained from the Lugovoy hack is now being used in the interests of intelligence.
P.S. We thank our hacktivist friends from Cyber Resistance group for the exclusive opportunity to jointly work on this investigation and make it public. We invite readers to subscribe to our telegram channel, where we publish much more information than gets to InformNapalm website.
Read more publications based on the data from Cyber Resistance hacktivists
- Hacking a Russian war criminal, deputy commander of the OMON of the Krasnoyarsk Krai
- Hacking a Russian war criminal, commander of 960th Assault Aviation Regiment
- Hacking Russian Z-volunteer Mikhail Luchin who ordered sex toys for $25,000 instead of drones for the Russian army.
- BagdasarovLeaks: hacking ex-member of the Russian State Duma Semyon Bagdasarov. Iranian gambit
- Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 28
- Hacking “James Bond”: medical service commander of 960th Assault Aviation Regiment doxed key personnel of his own unit