Information has spread on social media that a large-scale disclosure of the personal data of Uzbekistan's citizens may have occurred. According to unconfirmed reports, the central OAuth server of the e-government system may have been compromised; it is used for authorization in a number of state and private systems, including the Ministry of Internal Affairs, the National Agency for Social Protection, the National Statistics Committee, and a mortgage refinancing company.
If the leak did occur, attackers could have gained access to the data of about 15 million users: surnames and first names, addresses, dates of birth, phone numbers, e-mail addresses, and passport details. The Cybersecurity Center said that an inspection is underway and that official information will be published based on its results. Citizens were urged to maintain digital hygiene: use strong passwords and do not share data via suspicious links.
At the same time, the National Statistics Committee noted that the data collected during the online stage of the population and agriculture census from January 15 to 31, 2026, was stored in encrypted form on protected servers. No photographing of citizens was carried out, and the census data is fully protected in accordance with the requirements of the national information security system.
