Russian cybercriminals have stolen login-ins belonging to 595 military personnel, MoD civil servants and defence contractors since 2020.