Uzbekistan Investigates Reports of a Possible Data Leak Affecting Millions of Citizens

Tashkent, Uzbekistan (UzDaily.com) — Reports have circulated on social media alleging a large-scale leak of personal data belonging to citizens of Uzbekistan.

According to these claims, the central OAuth server of the e-government system may have been compromised. This server is used for authorization across a number of government and non-government information systems, including services of the Ministry of Internal Affairs, the National Agency for Social Protection, the National Statistics Committee, and the Mortgage Refinancing Company.

Unconfirmed reports suggest that as a result of a possible breach, attackers may have gained access to the personal information of approximately 15 million users. The allegedly compromised data include first and last names, residential addresses, dates of birth, phone numbers, email addresses, and passport details.

The Cybersecurity Center has stated that an investigation is currently underway. Additional official information will be released upon completion of the review.

Citizens have been urged to observe digital security measures and refrain from sharing personal data with third parties. In particular, users are advised to use strong logins and passwords when accessing government and other electronic information systems and to avoid entering personal information via suspicious links.

The National Statistics Committee reported that during the online phase of the population and agricultural census conducted from 15 to 31 January 2026, all collected data were stored in encrypted form on separate servers and remained securely protected.

The agency emphasized that personal data obtained during the census are fully safeguarded and that there are no grounds for concern regarding their security.

It was also noted that no photographs of citizens were taken during the census process and that no images were uploaded to any databases.

All information is processed and stored in strict compliance with the requirements of the national information security system, and the possibility of data leakage through external sources is completely excluded.