Threat actors claim to hold 27 million Uzbek citizens’ records and have set a sale deadline of 2 November, as a separate account reveals a critical ministry vulnerability affecting 40 million people went unpatched for nearly two weeks after officials dismissed the warning.
Uzbekistan’s Interior Ministry, the State Security Service’s Cybersecurity Center and AUTODOC have opened a joint investigation after citizens reported finding their PINFL numbers, passport details, addresses and vehicle records in Telegram bots. Authorities have neither confirmed nor ruled out a breach.
Databases circulating on social media may contain the PINFL numbers, home addresses, vehicle details and licence documents of users of SafeRoad, inDrive, Lada Auto, KiwiTaxi and Fargo, a digital expert says after finding his own records in the files.
