Every third data record stolen worldwide linked to CIS
Central Asian countries accounted for over 257 million records attributed to the CIS, according to a fresh report by Russian cybersecurity company F6 covering database leaks that occurred in 2025 and the first half of 2026.
The figure represented 33.7% of all leaked records observed by the company globally. F6 classified Tajikistan, Kazakhstan and Uzbekistan under the CIS region in its Global Threat Landscape 2025–2026 report.
Those three countries made up the entire regional breakdown presented by the company, but the report fails to explain why other CIS countries, including Russia, are absent from the regional country breakdown.
The CIS showed the largest share of leaked records (33.7%) observed by F6, ahead of Latin America at 27.3% and the Middle East and Africa at 17.6%. However, the region accounted for only 4% of the total number of leaks, indicating that a small number of incidents involved unusually large databases.
F6’s figures covered 164 newly identified database breaches posted on dark web forums and specialised Telegram channels, but they do not represent every data breach recorded during the period.
Tajikistan accounted for 84.5% of the regional total
Tajikistan dominated the Central Asian figures with about 217 million leaked rows, or 84.5% of the regional total. Kazakhstan followed with around 25 mn records, or 9.5%, while Uzbekistan accounted for approximately 15 mn, or 6%.
F6 explained the unusually high Tajikistan figure by citing an incident that saw government portal data leaked in September 2025 and subsequently offered for sale on the darknet.
The seller claimed the database contained information on people crossing Tajikistan’s border and included roughly 217mn rows of data entries. The report does not state that these rows represent 217mn unique individuals.
Data breaches in Uzbekistan and Kazakhstan
For Uzbekistan, F6 highlighted an advertisement posted on an underground forum on February 2, 2026, by the threat actor ByteToBreach.
The actor claimed to have extracted information on more than 15 million Uzbek citizens, including full names, physical addresses, dates of birth, phone numbers, email addresses and passport details.
Kazakhstan recorded several large incidents. One database published in a private Telegram channel in June 2025 contained about 16mn rows linked to residents, according to F6. Two education-sector leaks later in 2025 exposed a further 2.2mn and 6.3mn rows, respectively, according to the report.
