Hackers Leak Personal Data of Kazakhstani Athletes

A new major leak of personal data has been uncovered in Kazakhstan. The hackers’ archive contains personal information about athletes: full names, individual identification numbers, phone numbers, email addresses, and even details about sports titles, Orda.kz reports.

A hacker forum published an archive allegedly belonging to the national sports registry Esport.gov.kz. The archive contains 286,000 records with information about athletes and coaches, according to Profit.kz.

The eSport information system is a unified database for the sports sector. It stores information on rankings, sports titles, disciplines, and the event calendar. The dataset released by the hackers includes full names, identification numbers, dates of birth, nationality and ethnicity, region of residence, type of sport, status in the system, as well as contact details such as phone numbers and email addresses.

Cybersecurity specialists describe the leak as critical.

 Such data can also be used to attempt to take out fraudulent microloans.

It is not yet known how the hacker gained access to the dataset: whether through a vulnerability in the web application or by compromising an administrator account. The law requires database operators to notify the authorized body and affected users within three working days after discovering a leak.

Earlier, we reported that Kazakhstan was among the countries targeted by new attacks from hacker groups. Apple and Google warned users about attempts to break into accounts.

According to Google, hundreds of users in various countries, including Kazakhstan, were targeted. The company added the identified domains to Safe Browsing and recommended installing updates promptly.

 Original Author: Ruslan Loginov