Listen to the article
Databases purportedly containing sensitive personal information about users of several popular Uzbek digital services have been circulating on social media, raising alarm about a possible large-scale data breach affecting platforms including SafeRoad, inDrive, Lada Auto, KiwiTaxi and Fargo.
Digital technology expert Shuhrat Kurbanov said he examined the files being shared online and found his own personal data among them — including his PINFL (the unique personal identification number used across Uzbekistan’s state systems), home address, vehicle details and information from his driving licence and vehicle registration documents. Kurbanov said he had initially assumed the leaked material would contain only basic information such as email addresses, but the contents proved far more sensitive than expected.
What the Files Reportedly Contain
Beyond the data Kurbanov personally verified, other posts circulating alongside the alleged databases claim the files include records of purchases, delivery orders and medicines bought at pharmacies over several years. The combination of state identification numbers, residential addresses and vehicle documentation would, if confirmed, represent a significant exposure of the kind of data routinely used for identity verification across both public and private services in Uzbekistan.
Kurbanov expressed hope that the companies and organisations involved were already aware of the situation and had begun investigating the source of the leak.
No Official Confirmation Yet
At the time the reports emerged, none of the named services had issued a public statement, and no official figure had been given for the number of users potentially affected. It has not yet been established whether the circulating databases are genuinely linked to the listed platforms, nor what the true scale of any breach might be. No government agency had publicly confirmed or denied the incident.
The episode highlights the vulnerability of personal data held by private digital platforms operating in Uzbekistan, where state identification numbers and vehicle records are tied to a wide range of everyday services. The absence of any immediate official response leaves users of the affected apps without guidance on whether their information has been compromised.