Kazakhstan's Ministry of Artificial Intelligence and Digital Development has launched a technical investigation following social media reports alleging that personal data belonging to around 15mn Kazakh citizens has been offered for sale on the darknet, as it was informed by Tengrinews.
According to information circulated on social networks, a hacker claims to possess a database containing personal and contact information of Kazakh citizens. The dataset reportedly has a file size of approximately 2.7 gigabytes and contains around 47mn records. Reports indicate that the seller has offered the database for 0.5 bitcoin, valued at approximately $32,000. The information allegedly contained in the database includes passport details, telephone numbers, email addresses, employment information, scanned documents and passwords.
The individual offering the database reportedly claimed that the information was obtained by compromising Kazakhstan's electronic government portal, eGov. However, the Ministry of Artificial Intelligence and Digital Development stated that there is currently no confirmed evidence that government information systems were breached or that the reported data originated directly from eGov.
"At the moment, there is no confirmed information that electronic government information systems were hacked and the data was obtained directly from eGov," the ministry said.
Authorities are conducting a technical investigation together with relevant agencies and services. As part of the process, specialists will examine samples of the allegedly leaked information and attempt to determine the original source of the data. The ministry also noted that some of the information described in reports about the alleged database does not correspond with the structure and format used by Kazakhstan's electronic government systems.
Scanned passport copies are not stored on eGov in the form described by the seller, while digital documents used by the platform are stored in a different format.
"In particular, scanned copies of passports are not stored in eGov in the claimed form, and digital documents are in a different format. A statement by a Darknet user about the origin of the database cannot be considered as confirmation of a breach of the eGov system," the ministry stated.
The authorities have therefore not confirmed either the reported compromise of eGov or the claimed source of the database. The technical investigation remains ongoing, with additional information expected to be released after its completion. In response to the reports, the ministry advised citizens to follow standard digital security practices. These include not providing SMS verification codes, passwords or electronic digital signature data to third parties, avoiding suspicious links and using different passwords for separate online services.
