Caliber.Az Kazakhstan's Data of 15 Million Citizens Allegedly Sold on Dark Web
Article Content
- •15 million records of Kazakh citizens allegedly for sale on the dark web.
- •Kazakhstan's Ministry of Digital Development claims the data sale is fraudulent.
- •Authorities are investigating illegal data storage and use amid ongoing security concerns.
Personal data of 15 million Kazakh citizens, approximately three-quarters of the population, is reportedly for sale on the dark web. The seller claims the data was obtained through a breach of the government's eGov service. The database, listed by a user named shymzz13, allegedly contains 47 million records, including sensitive information like passport details and passwords. Kazakhstan's Ministry of Digital Development has stated that the claims are fraudulent and confirmed that no breach of government systems occurred. This incident follows several recent data security concerns regarding the eGov platform, including unauthorized access to personal pages. Authorities are currently investigating the illegal storage and use of personal data, involving multiple law enforcement agencies. The reported sale is part of a broader context of data leaks in Kazakhstan, including a significant leak disclosed in summer 2025, which was attributed to improper use of legitimate access rather than a direct breach.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…