Russia Tightens Internet Controls, Raising Operational Risks for Organizations

Recorded Future reports that the Kremlin has intensified restrictions on digital communications and infrastructure since mid-2025. These measures aim to suppress domestic political dissent and conduct digital surveillance within Russia, marking an escalation from pre-2024 censorship approaches.

The Russian government is increasingly targeting virtual private networks, implementing state-managed internet shutdowns, and limiting civilian communications platforms. Insikt Group assesses these actions are designed to facilitate extensive surveillance while maintaining some connectivity to the global internet.

Context and Background

Insikt Group states the Kremlin’s primary objectives are twofold: monitoring online activity to control the domestic information space and developing national infrastructure for potential isolation. Efforts have almost certainly enhanced Moscow’s ability to control and monitor domestic online discourse.

Since July 2025, the Kremlin has systematically tightened access to civilian communications applications and VPNs. Regular mobile internet outages across Russia and new surveillance requirements for individuals and firms are part of this strategy.

The Kremlin likely views these measures as necessary to hinder coordination of political dissent by elites or the public. They also aim to prevent the Ukrainian government from launching drone strikes against Russian critical infrastructure.

Technical and political limitations make it unlikely Moscow will achieve a fully “sovereign internet” in the near term. Instead, the most likely scenario involves extensive censorship and strict, though not absolute, controls on circumvention tools.

Who Is Affected

Individuals and organizations operating in Russia face increasing operational risks, including surveillance and exposure of sensitive data. Challenges in conducting emergency communications and disruptions to corporate tools and digital applications are also reported.

Entities with indirect exposure to Russia face an increased likelihood of supply-chain disruptions and sanctions violations. Over the longer term, restrictions limit the availability of high-quality open sources, challenging assessments of the political and economic situation.

The Kremlin will likely continue deterring VPN use by forcing platforms to support blocks and making usage more expensive. Insikt Group notes Moscow will likely avoid direct punitive measures against individual users.

What should you do?

Organizations should monitor for disruptions to corporate tools and digital applications within Russian operations. Supply-chain partners with Russian ties should be assessed for potential sanctions violations and service interruptions.

What to do and how to stay safe: Recorded Future

• Review current connectivity protocols for teams operating in or with Russia to identify single points of failure.
• Assess supply-chain dependencies on Russian vendors or infrastructure to prepare for potential disruptions.
• Monitor official channels for updates on VPN restrictions and internet shutdowns that could impact operations.
• Ensure data handling procedures account for increased surveillance risks in the region.

Step-by-step guide: How to Remove Data from Data Brokers: The Manual Cleanup Process

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Is Russia achieving a fully sovereign internet?

No, technical and political limitations make a fully sovereign internet unlikely in the near term.

What are the main operational risks for organizations?

Risks include surveillance, data exposure, communication challenges, and supply-chain disruptions.

When did these restrictions intensify?

The Kremlin intensified restrictions on digital communications and infrastructure since mid-2025.