Threat actors claim to hold 27 million Uzbek citizens’ records and have set a sale deadline of 2 November, as a separate account reveals a critical ministry vulnerability affecting 40 million people went unpatched for nearly two weeks after officials dismissed the warning.
Uzbekistan’s Interior Ministry, the State Security Service’s Cybersecurity Center and AUTODOC have opened a joint investigation after citizens reported finding their PINFL numbers, passport details, addresses and vehicle records in Telegram bots. Authorities have neither confirmed nor ruled out a breach.
