Minister Sherzod Shermatov stated that between January 27–30, 2026, information systems of three government agencies were targeted by cyberattacks. As a result, the data of approximately 60,000 citizens was leaked, rather than 15 million as claimed on social media.
According to officials, to stop the cyberattack, unauthorized access to information infrastructures was promptly blocked, and protective measures on technical security devices were further strengthened. Additionally, extra security measures were implemented in the Unified Identification System (OneID), allowing users to provide or restrict the sharing of personal data with other systems based on their consent.
It was noted at the event that a "personal data leak" does not mean a citizen's personal account was hacked; rather, information such as name, date of birth, address, or phone number may have been obtained. Even with this data, fraudsters cannot perform actions on behalf of a citizen without their personal involvement. Therefore, they may attempt further attacks using various methods to collect the remaining set of data.
