Russian analysts can locate Ukrainian weapons plants from details in published photos and TV footage, Ukrainian defense outlet Oboronka reported on 29 October. Open-source researchers told the outlet how to hide those details.

Ukraine plans to build 7 million drones this year, and Russia is hunting the plants that make them. In June, the Security Service of Ukraine (SBU) said Russia’s GRU military intelligence was gathering data to prepare air strikes on defense plants and attacks on their engineers.

A TV clip, then missiles

On 7 April 2022, Ukrainian channel 1+1 aired a report from a workshop at the Kyiv Armored Plant converting captured Russian military equipment for Ukraine’s forces. On 14 April, Rybar, an anonymous pro-Russian Telegram channel, posted the factory’s location. Russian missiles hit the workshop on 16 April, killing at least three civilians, the Centre for Information Resilience (CIR) found.

Retracing the likely method, CIR wrote that wall colors, window size, and ceiling height could single out the plant, and Google Earth imagery the workshop. InformNapalm researcher Andrii Lisitsyn told Oboronka that matching a frame with old photos, satellite images, job ads, or staff profiles quickly narrows the search.

A Gaussian blur smears pixels but keeps part of the information, Oboronka wrote. In a 2020 blog post, aerospace engineering student Gonçalo Raposo showed it can be fully reversed if the exact filter and edge handling are known. Pixelation fails too: a 2022 neural network reconstructs plausible faces from pixelated images. Lisitsyn advises cropping or fully opaque masking instead, plus checking file metadata.

Leaks beyond photos

Some Ukrainian defense enterprises still keep accounts and procurement records in Russian 1C software, Oboronka wrote. Since 6 January 2026, 1C products have been on the State Special Communications Service’s list of banned software. The ban covers systems with state information resources and critical information infrastructure owned or managed by state bodies, state enterprises, and local governments, the service said.

Oboronka also wrote that days before the full-scale invasion, Spanish journalist Pablo González photographed production lines at engine maker Motor Sich. Poland held him from February 2022 until a prisoner swap sent him to Russia in August 2024. Prosecutors then indicted him under both his names, Pablo González and Pavel Rubtsov, for spying for Russian military intelligence.