Uzbekistan Ranks Third in Central Asia for Data Leaks

Tashkent, Uzbekistan (UzDaily.uz) — Uzbekistan recorded approximately 15 million compromised data records from leaked corporate and government databases between 2025 and the first half of 2026. According to the F6 2025–2026 Cyber Threat Landscape Report, the figure places Uzbekistan third in Central Asia for leaked data volume, behind Tajikistan and Kazakhstan.

Globally, cybersecurity firm F6 identified over 600 million compromised user records across 164 database leak publications during the period. Of these, 91 databases were posted freely on hacker forums and Telegram channels, while 73 were offered for sale. Central Asian countries accounted for 257 million compromised records, representing more than a third of the global total.

Tajikistan recorded the largest volume of leaked records in the region at approximately 217 million entries, or 84 percent of Central Asia's total, primarily due to a single large-scale public sector breach. Kazakhstan ranked second with roughly 25 million records (10 percent), while Uzbekistan accounted for 15 million records, or 6 percent of the regional volume.

The distribution by number of leak publications differed from total record volume. Kazakhstan led the region with 57 percent of all leak postings, followed by Uzbekistan at 29 percent and Tajikistan at 14 percent.

By sector, the government domain dominated Central Asia's compromised records at 96 percent, driven by the major breach in Tajikistan. The education sector ranked second with 3 percent of compromised entries, largely driven by platform breaches in Kazakhstan totaling 8.5 million records. Regarding publication frequency, the public sector accounted for 43 percent of all leak postings, followed by education at 29 percent and the financial sector at 28 percent.

F6 Underground Research and Monitoring Head Lada Kryukova noted that while a single large leak can skew regional statistics, regular smaller breaches pose equal risks to businesses and citizens. The cybersecurity firm recommended that organizations strengthen data protection, conduct security assessments, track compromised credentials, and implement incident response plans to mitigate breach impacts.