On April 27, a platform frequented by cybercriminals and data brokers saw a high-stakes listing: the personal data of employees from the Cybersecurity Center State Unitary Enterprise.
According to the advertisement, a hacker claims to have successfully breached the Center’s internal systems, gaining unauthorized access to databases belonging to the State Security Service (DXX) and intelligence personnel.
To substantiate these claims, the attacker leaked the personal information of 100 employees. The exposed data includes full names, job titles, and Personal Identification Numbers of Physical Persons (PINPP). The hacker released edited versions of these PINPP—which they described as "highly valuable data" - as a teaser for the full cache.
The hacker asserts that the complete list of staff and the data extracted directly from the internal database is "significantly larger" and contains information far more sensitive than what has been shared so far.
A ransom of $200,000 has been demanded from Uzbek authorities to halt the full release of the data. The ultimatum, posted in both English and Russian, warns: "Otherwise, new leaks will follow shortly, leading to dire consequences for them."
The Cybersecurity Center has issued a statement regarding the incident, asserting that preliminary investigations show the "circulated information does not correspond to reality."
"It is important to emphasize that the Cybersecurity Center’s internal information systems have not been breached, and the center does not utilize the specific type of database mentioned," the official statement read.
The Center’s spokesman Dilshod Turaev confirmed that the personal details shared by the hacker do indeed belong to actual employees. However, he pointed out that staff names and job titles are already publicly available on the Center's official website. He further maintained that the employees' PINPPs published by the hacker were not obtained through a breach of the Cybersecurity Center’s own systems.
Follow us on:
