Data of 16 Million Kazakhstanis Leaked

Data of 16 Million Kazakhstanis Leaked

What happened and what steps should be taken — explained by QazCloud's Operational Cybersecurity Center experts

The most likely cause of the leak is an unsecured data transmission channel. Such incidents often occur due to the lack of DLP systems and the absence of strong information security policies in organizations.

Leaked personal data may be used for phishing or fraud. However, many online services require personal identity verification, which significantly reduces the risk of unauthorized access. We strongly recommend enabling two-factor authentication (2FA) on platforms like Instagram, WhatsApp, Telegram, and TikTok.

This is not the first incident. In 2019, a similar breach exposed the data of approximately 11 million citizens — including full name, IIN, address, ID number, and issuance date.

Recommendations for individuals:

  • Use strong and unique passwords
  • Regularly update apps and passwords
  • Enable 2FA
  • Monitor banking activity
  • Set restrictions on credit applications via egov (especially for elderly relatives)

Recommendations for organizations:

  • Implement SIEM systems
  • Monitor data transmission channels
  • Increase staff awareness in cybersecurity

🔐 Cybersecurity is not a reaction — it's a daily routine.