Kazakhstan Examines Data Leak Claim Involving 15 Million People

A database allegedly containing the personal information of 15 million people in Kazakhstan has appeared on the dark web. The seller is asking 0.5 bitcoin, about $32,000, for a dataset containing tens of millions of records. The seller claims the information was obtained after hacking the government’s eGov portal. Kazakhstan’s Ministry of Artificial Intelligence and Digital Development has not confirmed that account. Specialists are examining samples of the database and trying to determine where the data came from. The sale was reported by the Russian Telegram channel Mash. According to the channel, the file is about 2.7 GB and contains 47 million rows. Its description lists passport details, phone numbers, email addresses, places of employment, passwords, and scans of documents. The claim that the database contains information on 15 million people has not been independently confirmed. Kazakhstan’s Ministry of Artificial Intelligence and Digital Development disputes the allegation that eGov was hacked. It said a preliminary review had found no evidence that government e-services were breached, and that officials were examining samples of the data to determine where they came from. The ministry has also questioned parts of the database description. For example, eGov does not store scanned copies of passports in the form described by the seller, while digital documents have a different structure. The allegation follows at least two other major cases involving personal data in the past 14 months. In June 2025, around 16 million records containing the names, individual identification numbers, addresses, and phone numbers of Kazakhstani citizens were found to be publicly accessible. The Health Ministry later said the dataset had been compiled from various sources, possibly including the information systems of medical organizations. It said any information originating from medical systems dated from before April 1, 2024. The Digital Ministry later reported that the investigation had found no signs of a direct hack. According to the ministry, much of the information had been extracted in 2022, possibly by someone with legitimate access to personal data or by a third party using credentials that had been shared or stolen. The investigation into that leak has still not been completed. In April 2026, the National Security Committee said the criminal case remained under investigation. The agency disclosed no further details, citing the confidentiality of the investigation. The allegation comes just two months after police seized another large database containing personal information on nearly 16 million Kazakhstanis from employees of a collection agency in the Zhetysu region. It is not known whether the two datasets are connected. Investigators must therefore establish whether the database offered for sale is authentic and how recent its contents are. The 2025 case showed how information from different sources and different years can be combined into a single database, meaning a large file offered for sale does not necessarily represent a new breach. There is reason to take such reports seriously. According to KZ-CERT data cited by research agency Finprom, Kazakhstan recorded 9,400 information security incidents in the first three months of 2026. Nearly...