Bases de dados de cidadãos do Uzbequistão… · Breach

Uzbekistan probes alleged leak of citizen data linked to SAFE

Nov 03, 2026 · 1 min read

Uzbekistan's Interior Ministry has opened a joint review with the State Security Service's Cybersecurity Center after databases said to hold citizens' personal data circulated in Telegram bots on Oct. 28-29. Users report PINFL ID numbers, passport details, addresses, phone numbers and vehicle registration data, with posts linking the records to SAFE Service, which denies any leak. No breach is confirmed; origin and scale remain unverified pending the ministry's findings.

By HIFY Radar newsroom Updated 11/03/2026 10:59 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

Uzbekistan's Interior Ministry has opened a joint review with the State Security Service's Cybersecurity Center. Databases said to hold citizens' personal data circulated in Telegram bots on Oct. 28-29, according to user reports. No breach has been confirmed.

Why it matters

Reports cite PINFL ID numbers, passport details, addresses, phone numbers and vehicle registration data. If confirmed, the dataset enables identity fraud against citizens. SAFE Service and other companies named in the posts deny any link and already face reputational risk.

What to do

Wait for the ministry's findings before attributing the source. Named companies should review logs and protection of databases holding Uzbek customer data. Treat Telegram lookup bots as possible merges of older leaks.

For the technical team

Affected: Bases de dados de cidadãos do Uzbequistão circulando em bots do Telegram; registros ligados ao serviço SAFE · Reported data: PINFL ID numbers, passport details, home addresses, phone numbers, vehicle plates, driving licences and vehicle registration data. Posts link records to SAFE Service (formerly SafeRoad), inDrive, Lada Auto, KiwiTaxi and Fargo; links unconfirmed.
Exploitation: No breach confirmed. Users report data circulating in Telegram bots on Oct. 28-29; DailyDarkWeb notes aggregated "probiv" lookup bots often merge older leaks.
Fix: Not applicable; joint review underway by the Interior Ministry and the State Security Service's Cybersecurity Center.
Vector: Databases holding citizens' personal data circulating in Telegram lookup bots; origin, method and breach point unknown.
More details: SAFE Service denies any leak, saying the records were compiled from various sources before its app launched. The number of people affected and the data's origin remain unverified.