Cybersecurity Center Examines Reports of Mass Personal Data Breach
Technology
Authorities in Uzbekistan are investigating reports that personal data of citizens have been published in the darknet, allegedly sourced from government information systems. The Cybersecurity Center is examining the situation, and experts advise citizens to protect their data carefully.
Links to darknet resources allegedly containing personal data of Uzbek citizens have been circulating on social media and Reddit. Preliminary reports suggest that data of up to 15 million people could be involved.
On February 3, the Cybersecurity Center confirmed that it is reviewing the information and will provide additional details once the investigation is complete. Citizens are advised not to share personal data and to use strong logins and passwords for electronic systems.
The National Statistics Committee assured that population and agricultural census data collected from January 15–31 are securely stored in encrypted servers and are safe.
Corporate cybersecurity expert Dmitry Paleev noted that the actual threat might be exaggerated. Compromised data could include logins, passwords, email addresses, phone numbers, passport details, and photos.
Paleev recommended that users change all passwords and enable two-factor authentication, while government agencies must identify when and how unauthorized actions occurred, document the timeline, and close vulnerabilities. He noted that this incident could be a supply chain attack, where compromising one resource gives access to other connected systems.
On February 3, the Cybersecurity Center confirmed that it is reviewing the information and will provide additional details once the investigation is complete. Citizens are advised not to share personal data and to use strong logins and passwords for electronic systems.
The National Statistics Committee assured that population and agricultural census data collected from January 15–31 are securely stored in encrypted servers and are safe.
Corporate cybersecurity expert Dmitry Paleev noted that the actual threat might be exaggerated. Compromised data could include logins, passwords, email addresses, phone numbers, passport details, and photos.
Paleev recommended that users change all passwords and enable two-factor authentication, while government agencies must identify when and how unauthorized actions occurred, document the timeline, and close vulnerabilities. He noted that this incident could be a supply chain attack, where compromising one resource gives access to other connected systems.
Powered by Froala Editor