Alleged leak affects data attributed to approximately 15 million residents after a person identifying as a hacker claimed to have stolen records from the national eGov service. The post of the claim online prompted scrutiny from domestic agencies and media, and has raised questions about the integrity of the centralised platform that manages many public services in Kazakhstan.
eGov service is the government portal used for a range of administrative functions, including identity verification, access to state services and transmission of personal documents. Officials have not publicly confirmed the scope of the data allegedly exposed, and the operator of the platform has not released full technical details. The claim, if verified, would represent a major compromise of information held in a system used by a large share of the population.
Kazakh authorities said they have initiated an investigation into the report and are reviewing system logs and evidence related to the allegation. Sources involved in preliminary inquiries described steps common to such probes, including forensic analysis of affected IT infrastructure, assessment of account activity, and coordination with specialised cybercrime units. Authorities have urged caution while the investigation proceeds and have not issued definitive findings.
Kazakhstan legal and regulatory frameworks govern handling of personal data, and the potential incident is likely to prompt a review of existing controls and incident-response procedures. Data-protection bodies and oversight institutions typically examine whether safeguards were in place and whether notification obligations were met; such determinations require time and access to technical records. The current investigation may also involve international cooperation if evidence indicates cross-border activity.
At this stage, the matter remains an open inquiry and authorities have not publicly detailed remedial measures or confirmed any confirmed breach. Officials responsible for the e-government platform and national cybersecurity will provide updates as the probe develops, and affected individuals and organisations are awaiting official guidance on verification and next steps.
