Cybersecurity Center investigates claims of personal data leak from state systems

Reports circulating on social media and the Reddit platform have raised concerns that personal data of Uzbek citizens may have been leaked onto the darknet, allegedly originating from state information systems. The country’s Cybersecurity Center has confirmed that the claims are currently under investigation, while the National Statistics Committee has rejected suggestions that census-related data were compromised.

According to posts shared on Reddit, links were published to several online resources, including darknet websites, which are claimed to contain data associated with information systems of Uzbek government institutions. The posts suggest that personal information belonging to up to 15 million citizens may be involved, though this has not been independently verified.

On February 3, the Cybersecurity Center issued a statement acknowledging the reports and confirming that an official review is underway. The agency said it is examining claims that personal data from certain state information systems had been unlawfully disseminated via social networks. It added that additional details would be released once the investigation is completed.

The Cybersecurity Center also urged citizens to remain vigilant, advising them not to disclose personal information to third parties and to use strong, complex login credentials when accessing state and other electronic information systems. Citizens were further warned against entering personal data through suspicious or unfamiliar links.

Amid online discussions suggesting that population and agricultural census data may have been exposed, the National Statistics Committee also commented on the situation. The committee stated that all data collected during the population and agricultural census, conducted online between January 15 and 31, are securely stored in encrypted form on a dedicated server.

According to the committee, there are no grounds for concern regarding the safety of census-related personal information, and all necessary measures have been taken to ensure its protection.