the home of online investigations

Russian Official Account of Attack on Ukraine Border Guards

May 30, 2015

By Aric Toler

The hacker collective “Ukrainian Cyber Forces” released a trove of documents from servers of the Russian Interior Ministry in December 2014, revealing a document that disclosed details of a Russian military attack on Ukrainian border guards. Among the 36GB of files (1.7gb cache here), the vast majority are completely unrelated to Ukraine—bureaucratic paperwork, criminal cases, border inspections, and so on. However, buried underneath endless minutiae is Донесение Тарасовский 26.08.2014 2.doc.

This report was written to A.P. Larionov, an official of the Russian Interior Ministry in the Rostov oblast’ from I.I. Trofimenko, an official of the Russian Interior ministry of the Tarasovsky district. The report is a police account written on August 26 describing the circumstances of a battle that took place on August 25 between Russian soldiers and the Ukrainian National Guard. Four of these Russian soldiers were injured in the fight and were evacuated to a Rostov garrison hospital. The key section of the account is as follows (translation from original Russian):

On August 25, 2014 around 3:50pm, M.V. Polstyankin, O.Yu. Volgin, Yu.A. Alekseev, and A.A. Gerasimenko, serving in contracted Unit 51182 of the Millerovo locality, suffered injuries in the performance of official duties during a clash with the forces of the National Guard of Ukraine 10km north-west of the small village of Prognoi of the Tarasovsky region. At 6:52pm on August 25, 2014, the wounded were evacuated to the Rostov garrison hospital via a Mi-8 helicopter of the Russian armed forces.



Using open source investigation, we can find various pieces of information that confirm that this leaked account did indeed occur. On August 26, the day after the events described in the above leaked document, the spokesperson of the Ukrainian National Security and Defense Council gave a briefing that details an attack on Ukrainian border guards. This attack took place in the area of Krasnaya Talovka, resulting in the death of four border guards and three injuries.

On August 25 in the area of “Krasnaya Talovka” of the Luhansk oblast, a sabotage and reconnaissance group which crossed the border from Russia was detected. At 3:00pm, a well-disguised border detail used automatic weapons to stop the advance of the saboteurs. Additional operational combat groups of border guards arrived at the battle as reinforcements. The fierce battle with Russian mercenaries lasted for two-and-a-half hours. The diversionary group was supported with fire from mortars, two APCs, and two IFVs from the Russian Federation. Additionally, Ukrainian border guards were fired upon by unguided rockets from two Mi-24 combat helicopters of the Russian armed forces. During the battle, four border guards died and three were wounded. Thanks to the actions of the heroes, a breakthrough across the border did not occur. The enemy suffered significant losses. The wounded and killed saboteurs were evacuated from the battlefield in Russia with an IFV under the cover of fire from APCs and helicopters.

There are numerous details in the two accounts that align, leading us to believe that the Ukrainian and Russian accounts are describe the same event.

  • Both events occurred at August 25. According to the Russian account, four soldiers were injured “around 3:50pm,” while the Ukrainian account details how the two sides engaged at 3:00pm.
  • The Ukrainian details how account says that the border guards stopped a “sabotage and reconnaissance group” coming from Russia. The Russian account details how four Russians were injured “in the performance of official duties” while clashing with forces from the Ukrainian National Guard.
  • Both accounts describe how a helicopter entered the battlefield at the end of the fight. The Russian account goes into more detail, describing how the four wounded soldiers were evacuated with a Mi-8 helicopter.
  • The Ukrainian account describes how the fight took place near Krasnaya Talovka, while the Russian account says that the clash happened “10km north-west of the small village of Prognoi.” Krasnaya Talovka is almost exactly 10km north-northwest of Prognoy.

All of the press releases and leaked documents pale in comparison with the human stories of this fight, which are painfully real, despite any doubts that many cast on the veracity of the leaked documents. This human suffering exists for both Russian and Ukrainian families. As described in the leaked Russian document, the young Russian paratrooper Mikhail Polstyankin, who was serving in military unit 51182 in Millerovo, died in the fight with Ukrainian border guards.  The Gruz200 blog (not to be confused with similar efforts that share the name) presented four posts from social media, including Facebook and VK, documenting the death of Mikhail Polstyankin. Two people from his hometown posted regarding the death of the soldier on August 28, three days after the firefight on the border, and a third person posted a message [archived] celebrating the “Eternal memory of Misha Polstynkin—The young Russian warrior who was for the Russian language and Rus’!!!”

There are also remarkable stories within these leaked documents regarding Ukrainian soldiers, with one standing out. In one document, a report describes how a Ukrainian lieutenant named Eduard Masko was injured on July 16, 2014 while fighting separatist soldiers. As we find in an article on, Lt. Masko was indeed wounded while fighting on July 16 (further bolstering the legitimacy of these leaked documents) after separatist forces attack a block post near Marinovka, Ukraine. Masko was badly burned and could not walk on either of his legs, as one was broken and the other burned. Eventually after being dragged to a nearby safe area, an ambulance took Masko to a hospital—in Russia. However, as we learn in an interview with the injured soldier, the doctors and nurses at this hospital saved his life by amputating his injured leg. Unfortunately, Masko’s comrade who was also injured in the attack died in this hospital—the Russian doctors and nurses cried after he died. Soon after, Masko returned to Kyiv to receive additional treatment. He is now alive and well—perhaps even better than before. His newborn son Kostya was born shortly after he received near deadly injuries, and Masko was able to travel to America to receive superior treatment for his burns.

While leaked documents cannot always be trusted at face value, they can also be valuable in providing extra validation of some events. Leaked documents or not, there was a border clash on August 25, and Eduard Masko was hurt on July 16 and treated in a Rostov hospital. However, by following the leads provided in these leaked documents, the narratives can gain many dimensions with open source information, including both the tragedy of Russian soldier’s death after attacking a Ukrainian checkpoint and the joy in the kindness of ordinary Russians in saving a Ukrainian soldier’s life.

See this post from the Global Voices Online special project “RuNet Echo” for this story in its original form, along with a profile of the hacker collective who leaked the documents.

Aric Toler

Aric Toler started volunteering for Bellingcat in 2014 and has been on staff since 2015. He currently heads up Bellingcat's training efforts and its Eastern Europe/Eurasia research.

Join the Bellingcat Mailing List:

Enter your email address to receive a weekly digest of Bellingcat posts, links to open source research articles, and more.

Support Bellingcat

You can support the work of Bellingcat by donating through the below link:


  1. Robert Johnson

    the Ukrainian border guards were hit by rockets from Mi-24 Hind helicopters but didnt all die?

    they really are heroes.

    • Justin Chapman

      The report clearly specifies that they were “fired upon by unguided rockets…” It makes no claims to the accuracy of said rocket fire or casualties sustained thereby.

      • Robert Johnson

        It’s a riveting story.

        I’m just glad there are google maps and blog posts to corroborate all this.

        • Peter Hermann

          You sound bitter Robert. Ever thought of trying to do investiative journalism yourself?

          • Not Mark

            It is easy to play devil’s advocate. It takes much more intelligence and hard work to find the truth amongst the noise.

          • Max

            @Peter: why should he, it is much more easier to spit on the work others do, than getting out of comfortzone. And at least the try to make invetigative jounalistic work does not match a cynical picture of the world.

  2. Not russian Land

    One of the better articles I’ve read that confirms from multiple sources the presents of Russian troops in Ukraine.

  3. Joe Morton

    Every Russian death is a tragedy. 14,500+ Ukrainian KIA or seven times the fraudulent Kyiv Post numbers is a statistic. Bellingrap is dedicated to helping the junta hide the scale of its losses from the Ukrainian people.

    • Not Mark

      Too bad the world will never know how many russians “on vacation” died because they both aren’t in the military any more after being force “retired” and aren’t counted as KIA and because now the kremlin has made it a crime punishable by 7 years of imprisonment for discussing such deaths. RIP freedom of information in mother russia! Better buy more of those nifty mobile crematoriums, eh?

    • ffsdfd

      14.500 ? lol – where do you have that figure from ? Dont you think, that unlike in Russia the NGOs in Ukraine would publish such a figure immediately if the KyivPost or government would lie about the KIA ?
      I persume, that about 3500-4000 ukrainian soldiers and members of the national guard were KIA or MIA. not more. This accounts to figures, that organizations of soldier relatives accounted.

    • Max

      bellingRAP? is it kinda hip hop? Old school? Eastcoast westcoast?

      Joe Joe, ya great inventor of new words. Keep on doiing this.

  4. Not russian Land

    Russia is one of the last oppressed society’s that will soon take to the streets to demand the removal of its evil leader who is causing them a slow demise of the countries economy and standing with the free world

  5. Not russian Land

    They have even.stoop so low as to burning their own soldiers in mobile crematory trucks to cover up the fact they are there. There’s going to be a lot more unknown soldiers to pay homage to by putin.

    • John

      Sadly, I fear your comments do not reflect reality. When an autocratic/totalitarian leader rules with such massive popular support (see: Adolf Hitler/WWII) that person often leads until they die (see: Adlolf Hitler/WWII). Putler believes that Ukraine is not a “real” country and that the breakup of the Soviet Union was the “worlds greatest catastrophy”. Thus he sees his role as “savior” of the Rus people and will not stop, covertly or overtly, until he dies or is somehow and improbably loses the next election. The only reason he stepped down to be prime minister is to get the laws changed so he could be elected for life. Shameful and sad but reality.

  6. Simon

    Judging from the very first sentence of this article “The hacker collective “Ukrainian Cyber Forces” released a trove of documents from servers of the Russian Interior Ministry…” We may conclude that the facts that are presented in this article are true.. because they were presented by Ukrain hackers, who without any doubts stole them from Russian Interior Ministry.

    Fine, happens….36GB, no problem. shouldn’t be using icloud.

    So.. when the country that is involved in the conflict (supporting its own interest in the conflict) presents documents that were stolen from the other country that is also involved in the conflict (opposite side of the conflict) stating that those documents confirm this and this… This should at least raise a question, “whether the information provided is true” or “whether this information was in fact stolen from the Ministry” because, the information provided clearly supports interest of the country presenting this documents. In this article no questions asked, therefore the information provided is clearly a fact. Fine, next….

    The “document” or “report” stolen and presented clearly confirms that Russian solder was injured during the fight with Ukrainian forces. Really, why the draft of the “official report” should raise any question, It even got a name of head of Ministry, what? no signature? Well if you were dealing with such official and ” top secret” ( That have names in it) documents on the daily basis you would know that documents does not require signature and you can just type in your name next to it and it automatically becomes valid, just like that. What you could sign, scan, and then send it. Nonsense, why waste time, you only presenting this report to the head of sum sort of ministry. Seriously, a draft of the report, a draftttt, that was in the electronic format located on the server of ministry. What next? a picture of a man with a beard will be the next proof of presence of Russian forces in Ukrain? oh wait…

    Then the article goes..”Using open source investigation, we can find various pieces of information that confirm that this leaked account did indeed occur. Head of Ministry of whatever probably put it on twitter “Official documents were stolen along with my vodka, must be this kid from internet who promised that he will find me by ip”. So, what sources? You mean that link to an Ukrainian blogger website that presents proof of Russian solders in Ukraine by presenting of a print-screen of a Facebook status that states” A son of my friend “soldier name” “date of birth” (because in Russia friends always know your children date of birth) died on Ukraine territory” Cant argue that fact.

    But finally in the end of the article the author points out that “While leaked documents cannot always be trusted at face value, they can also be valuable in providing extra validation of some events. Leaked documents or not, there was a border clash on August 25, and Eduard Masko was hurt on July 16 and treated in a Rostov hospital”…Fact!!! Why? because ” In one document, a report describes how a Ukrainian lieutenant named Eduard Masko was injured on July 16, 2014 while fighting separatist soldiers” brilliant!! one report (uploaded google document) proves that stolen Russian reports are in deed true, Is there anything else that confirms the validity of this stolen reports/documents? Yes!!! “As we find in an article on, Lt. (Ukrain newspaper Article)Masko was indeed wounded while fighting on July 16 (further bolstering the legitimacy of these leaked documents)”.

    The end.


Leave a Reply

  • (will not be published)