Uzbekistan Investigates Alleged Leak of Citizen Data on Darknet Forums
Reports surfaced on social media and Reddit this week suggesting that the personal data of Uzbek citizens may have been leaked from government systems and shared on darknet forums. Claims circulated that the breach could involve records of up to 15 million individuals, prompting swift responses from state agencies.
On February 3, Uzbekistan’s Cybersecurity Center acknowledged the allegations, confirming an ongoing investigation into the purported data exposure. In a statement, the Center noted that while the claims had gained traction online, no conclusive evidence had been presented. Authorities pledged to release further details once the inquiry was complete.
Several government bodies, including the Statistics Agency, the State Tax Committee, and the Ministry of Internal Affairs, issued statements denying breaches in their systems. The Statistics Agency clarified that data from the recent online population and agricultural census conducted between January 15 and 31 remained securely encrypted on isolated servers. The Tax Committee and Ministry of Internal Affairs similarly asserted that their systems had not been compromised, with the latter stating no unauthorized access to its databases had been detected.
Despite official reassurances, the incident has raised concerns about potential vulnerabilities in state information systems. Authorities continue to urge the public to rely on verified sources for updates as the investigation progresses.
Source: https://timesca.com/uzbekistan-probes-alleged-personal-data-leak-from-state-information-systems/
UzCERT cybersecurity rating report: https://www.rankiteo.com/company/uzcert
Ministry of Internal Affairs of Republic of Uzbekistan cybersecurity rating report: https://www.rankiteo.com/company/ministry-of-internal-affairs-of-republic-of-uzbekistan
"id": "UZCMIN1770216507",
"linkid": "uzcert, ministry-of-internal-affairs-of-republic-of-uzbekistan",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Up to 15 million individuals',
'industry': 'Public Sector',
'location': 'Uzbekistan',
'name': 'Uzbekistan Government',
'type': 'Government'},
{'industry': 'Public Sector',
'location': 'Uzbekistan',
'name': 'Statistics Agency of Uzbekistan',
'type': 'Government Agency'},
{'industry': 'Public Sector',
'location': 'Uzbekistan',
'name': 'State Tax Committee of Uzbekistan',
'type': 'Government Agency'},
{'industry': 'Public Sector',
'location': 'Uzbekistan',
'name': 'Ministry of Internal Affairs of Uzbekistan',
'type': 'Government Agency'}],
'data_breach': {'data_encryption': 'Data from census securely encrypted on '
'isolated servers (per Statistics Agency)',
'data_exfiltration': 'Allegedly shared on darknet forums',
'number_of_records_exposed': 'Up to 15 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personal data of citizens)',
'type_of_data_compromised': 'Personal data'},
'date_publicly_disclosed': '2024-02-03',
'description': 'Reports surfaced suggesting that the personal data of Uzbek '
'citizens may have been leaked from government systems and '
'shared on darknet forums. Claims circulated that the breach '
'could involve records of up to 15 million individuals.',
'impact': {'brand_reputation_impact': 'Raised concerns about potential '
'vulnerabilities in state information '
'systems',
'data_compromised': 'Personal data of up to 15 million individuals',
'identity_theft_risk': 'Potential risk due to personal data '
'exposure'},
'initial_access_broker': {'data_sold_on_dark_web': 'Allegedly shared on '
'darknet forums'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Social Media and Reddit Reports'},
{'date_accessed': '2024-02-03',
'source': 'Uzbekistan Cybersecurity Center Statement'},
{'source': 'Statistics Agency of Uzbekistan Statement'},
{'source': 'State Tax Committee of Uzbekistan Statement'},
{'source': 'Ministry of Internal Affairs of Uzbekistan '
'Statement'}],
'response': {'communication_strategy': 'Public statements denying breaches '
'and urging reliance on verified '
'sources',
'incident_response_plan_activated': 'Ongoing investigation'},
'stakeholder_advisories': 'Public urged to rely on verified sources for '
'updates',
'title': 'Alleged Leak of Uzbek Citizen Data on Darknet Forums',
'type': 'Data Breach'}