Your Leaders Email Through Moscow

The Sovereignty You Cannot Email

When Armenia's Defense Minister sends an email, it does not travel through Armenian infrastructure. It does not pass through servers in Yerevan or through systems controlled by the Armenian state. It travels to Moscow. To servers operated by Mail.ru Group -- now VK -- a company subject to Russian federal law, Russian intelligence directives, and Russian state control.

This is not speculation. This is confirmed breach data. And the Defense Minister is not alone.

Our analysis of publicly leaked credential databases reveals a systematic pattern: Armenia's most senior officials, their families, the country's largest media company, its banking sector, and even its customs border infrastructure all depend on Russian email providers for their communications. Every one of these accounts is subject to Russia's SORM surveillance system -- a legal framework that gives the FSB direct, warrantless, real-time access to all data, metadata, and content.

Armenia is not being spied on through some sophisticated cyber operation. It is handing its communications to Russian intelligence voluntarily, one email account at a time.

What is SORM -- And Why It Matters

Confirmed - Russian Federal Law

SORM -- the System for Operative Investigative Activities (Sistema Operativno-Rozysknykh Meropriyatiy) -- is Russia's lawful interception framework. Under Russian federal law, every telecommunications provider operating in Russia -- including Mail.ru, Yandex, Rambler, and all their subsidiary domains -- is required to install SORM equipment that provides the FSB with:

• Direct access to all user communications content (emails, attachments, drafts)
• Full metadata (sender, recipient, timestamps, IP addresses, device fingerprints)
• Real-time interception without requiring provider cooperation or notification
• Historical data retrieval from stored communications
• No judicial oversight visible to the provider -- the FSB operates its own SORM equipment independently

This is not a secret. SORM compliance is a legal requirement for operating telecommunications services in Russia. Mail.ru, Yandex, and Rambler are all compliant. They have no choice.

When an Armenian official creates an account on mail.ru, every email they send or receive is legally accessible to Russian intelligence. Not through hacking. Not through a court order. Through infrastructure that is already installed and operational.

The Defense Minister: Moscow's Inbox

Confirmed - Breach Data

Suren Papikyan serves as Armenia's Minister of Defense. He is responsible for the nation's military strategy, troop deployments, weapons procurement, intelligence coordination, and wartime communications. He is the civilian head of the armed forces of a country that fought a war with Azerbaijan in 2020 and remains in an active territorial dispute.

His email: suren.papikyan@bk.ru

BK.ru is a subsidiary domain of Mail.ru Group. It operates on the same infrastructure, the same servers, the same SORM-equipped systems as mail.ru itself. Every email the Defense Minister sends or receives through this account is accessible to the FSB.

Consider what this means. The person responsible for defending Armenia from external threats communicates through infrastructure controlled by Russia -- a country that maintains a military base on Armenian soil, sells weapons to Armenia's adversary Azerbaijan, and has its own strategic interests in the South Caucasus that do not always align with Armenia's sovereignty.

The NSS Director: Intelligence Through Russian Servers

Confirmed - Breach Data

Andranik Simonyan is the Director of the National Security Service -- Armenia's primary intelligence and counterintelligence agency. The NSS is responsible for detecting foreign espionage, protecting state secrets, and safeguarding national security.

His email: andranik.simonyan.85@mail.ru

The head of Armenia's counterintelligence service uses an email address hosted on Russian infrastructure that the FSB can access at will. The person whose job is to prevent foreign intelligence services from compromising Armenian security is himself communicating through a channel that a foreign intelligence service can monitor in real time.

This is not a theoretical vulnerability. This is an operational one.

The First Family: Every Account in Moscow

Confirmed - Breach Data

Anna Hakobyan -- the wife of Prime Minister Nikol Pashinyan, founder of the My Step Foundation, and one of the most politically connected individuals in Armenia -- does not have one Russian email account. She has multiple, across multiple Russian providers.

The Prime Minister's wife communicates through at least four different Russian email providers. Every personal conversation, every foundation-related communication, every message to or from political figures passes through servers the FSB can access without a warrant.

The Extended Network: Mother, Brother, All on Russian Servers

Confirmed - Breach Data

The pattern extends beyond Anna Hakobyan herself to her immediate family -- people who, by virtue of their proximity to the Prime Minister, handle sensitive political and business information.

Kima Mkrtchyan -- Anna Hakobyan's mother and the owner of an Armenian newspaper -- uses mail.ru and inbox.ru (another Mail.ru subsidiary). Hrachya Hakobyan -- Anna's brother and a sitting Member of Parliament -- uses mail.ru, qip.ru, rambler.ru, and yandex.ru. Four Russian providers for one member of the PM's inner circle.

The FSB does not need to recruit a single agent in Yerevan. The Pashinyan family's communications are already flowing through Moscow.

The Opposition Too: Nobody is Clean

Confirmed - Breach Data

This is not a problem limited to the ruling party. Armenia's opposition is equally dependent on Russian email infrastructure.

Armen Ashotyan -- a prominent opposition MP from the former ruling Republican Party -- uses both mail.ru and rambler.ru. The FSB has access to both the ruling party's and the opposition's communications. Every political negotiation, every internal party discussion, every strategic calculation -- all of it flows through Russian servers.

Russia does not need to pick a side in Armenian politics. It can read both sides in real time.

Corporate Armenia: Banks and Media on Russian Infrastructure

Confirmed - Breach Data / DNS Records

The dependency extends beyond individuals into Armenia's corporate and institutional infrastructure.

Armenia TV -- the country's largest television channel -- routes its entire corporate email system through Yandex. This is not one employee using a personal account. The MX (mail exchange) DNS records for Armenia TV point to mx.yandex.ru. Every email sent to or from any @armeniatv address is processed by Yandex servers in Russia.

Armeconombank -- controlled by oligarch Khachatur Sukiasyan, one of Armenia's richest men and a key financial figure -- uses list.ru and yandex.ru email addresses. A bank. Banking communications. On Russian servers accessible to the FSB.

Armenian customs checkpoints -- the very border infrastructure that controls what enters and exits the country -- use rambler.ru email accounts. The border security apparatus of a sovereign nation communicates through Russian servers.

The Architecture of Exposure

System Architecture

Here is how the data flows. This is not theoretical -- this is the actual infrastructure path for every email sent by the officials documented above:

ARMENIAN OFFICIAL                RUSSIAN SERVERS              FSB ACCESS

Papikyan (Defense)  ---->  bk.ru (Mail.ru)   ---->  SORM INTERCEPT
Simonyan (NSS)      ---->  mail.ru            ---->  SORM INTERCEPT
A. Hakobyan (PM wife)----> mail.ru/yandex/    ---->  SORM INTERCEPT
                           rambler/bk
H. Hakobyan (MP)    ---->  mail.ru/qip/       ---->  SORM INTERCEPT
                           rambler/yandex
Ashotyan (Opp. MP)  ---->  mail.ru/rambler    ---->  SORM INTERCEPT
Armenia TV (media)  ---->  mx.yandex.ru       ---->  SORM INTERCEPT
Armeconombank       ---->  list.ru/yandex     ---->  SORM INTERCEPT
Customs checkpoints ---->  rambler.ru         ---->  SORM INTERCEPT

         |                       |                        |
    Armenian soil         Russian Federation          Lubyanka
                        (SORM-equipped servers)    (FSB headquarters)

Every arrow in this diagram is a legal, operational surveillance channel. Not a hack. Not an exploit. A feature of Russian law, applied to Russian infrastructure, that Armenian officials chose to use.

The Complete Exposure Map

Confirmed - Breach Data

Here is the consolidated evidence. Every entry below is confirmed through breach data analysis, DNS record examination, or both.

What This Means for Armenian Sovereignty

Armenia declared independence from the Soviet Union in 1991. Thirty-five years later, the country's most sensitive communications still flow through Moscow.

This is not about individual negligence. This is a structural dependency that has profound implications:

Military exposure. The Defense Minister's communications pass through Russian servers. Russia maintains a military base at Gyumri and has its own strategic calculations in the South Caucasus. Armenia's military planning is accessible to a country that sells weapons to Azerbaijan and brokered the ceasefire that cost Armenia significant territory in 2020.

Intelligence compromise. The NSS Director -- the head of counterintelligence -- communicates through infrastructure the FSB monitors. Any counterintelligence operation against Russian interests is compromised before it begins. Any intelligence source communicating with the NSS through these channels is exposed.

Political leverage. With access to both ruling party and opposition communications, Russia possesses total political intelligence on Armenia. It knows the internal dynamics of every political faction, every negotiation position, every vulnerability. This is leverage -- not the kind used in public diplomacy, but the kind used in quiet rooms.

Media control. Armenia TV's entire email infrastructure runs through Yandex. If Russia wanted to understand or influence Armenian media coverage -- what stories are being developed, which sources are being contacted, what editorial decisions are being made -- the infrastructure is already in place.

Financial surveillance. A major Armenian bank communicates through Russian email providers. Banking communications, client discussions, internal strategy -- all accessible to Russian intelligence.

Border security. Armenian customs -- the institution responsible for controlling what enters and exits the country, including sanctioned goods -- uses rambler.ru. Russia can monitor Armenian customs communications to understand exactly how sanctions enforcement (or non-enforcement) operates.

The Question Nobody is Asking

Armenia's government talks about sovereignty. It talks about diversifying its foreign policy. It talks about European integration and democratic values. It talks about reducing dependence on Russia.

But the Defense Minister emails through Moscow. The intelligence chief emails through Moscow. The Prime Minister's family emails through Moscow. The largest TV channel emails through Moscow. The banks email through Moscow. The border checkpoints email through Moscow.

You cannot build sovereignty on someone else's servers.

A country whose defense minister, intelligence chief, first family, largest media company, banking sector, and border infrastructure all communicate through the servers of a foreign power is not a sovereign state with a dependency problem. It is a dependency with the appearance of a state.

Methodology

This investigation is based on analysis of publicly available breach databases, DNS MX record examination, corporate registry filings, and open-source intelligence. SORM documentation is sourced from Russian federal law, published FSB compliance requirements, and technical analyses by international telecommunications researchers. No systems were accessed, penetrated, or tested. All email addresses referenced were already publicly exposed in breach data at the time of analysis. OWL does not encourage unauthorized access to any system.