Kazakh Ministry Denies Major Data Breach After Reported Six-Month Hack

Authorities in Kazakhstan have responded to media reports alleging that hackers maintained access to government systems for approximately six months. The Ministry of Artificial Intelligence and Digital Development stated that no confirmed facts of a large-scale data leak have been established.

Reports had emerged citing analysis from the Center for Analysis and Investigation of Cyberattacks (CAICA), suggesting a prolonged, covert breach of digital systems within several state bodies. The alleged compromise reportedly targeted email servers, domain controllers, high-privilege workstations, and other critical internal infrastructure, raising concerns about leaked official correspondence.

In an official statement, the ministry clarified that the CAICA report was published to raise awareness about contemporary cyber threats and to strengthen information security measures. The ministry acknowledged it was aware of the cyber incidents referenced in the public materials.

"Signals following cyberattacks were taken into account and analyzed according to established procedure," the ministry's response noted, adding that public disclosure of specific details could create additional security risks. While analysis and assessment of the incidents are ongoing, final conclusions will be formed upon completion of all investigative activities.

The ministry did not specify which particular servers or state agencies were targeted, citing information with limited distribution.

"Based on inspection results, facts of a large-scale leak of citizens' personal data have not been confirmed," the statement emphasized. It acknowledged that individual incidents related to potential compromise of official information were reviewed and underwent additional technical and forensic verification.

The ministry further stated that "at present, no confirmed data has been established regarding a systemic leak of official correspondence, internal documents, or account data in volumes posing a threat to national or public security."

In response to the identified malicious activity involving various software utilities, including malware, the ministry reported that additional response measures had been taken and recommendations for strengthening protection were issued.

The discussion follows recent warnings from a member of parliament about cybersecurity risks to Kazakhstan's fuel and energy complex and industrial facilities, citing outdated equipment and often formal protective measures.