The Vice-Minister for Artificial Intelligence and Digital Development Doszhan Mussaliyev commented on the situation regarding the leak of schoolchildren's personal data from the Kundelik educational system. According to him, the leak did occur, but it happened several years ago and does not affect the current database of the service.
According to Kursiv.media, Mussaliyev stated that the data in question dates from approximately 2016 to 2020 and does not correspond to the current information used by the company. Additionally, the Vice-Minister claimed that no hacking of the Kundelik information system was recorded — only the login and password of a person from the company were stolen.
"No, logins and passwords were not stored. This was a system user who had access to view children's data — their login and password were stolen. Through this, all the information was downloaded. And even then, not all the data was downloaded," he stated.
As a result, for violating information security requirements, the company Kundelik was fined 750 MCI (2.9 million tenge). Mussaliyev clarified that the investigation into this matter is ongoing, and its full results will be published later.
Additionally, the Vice-Minister stated that the department currently has no information suggesting that the leaked data was sold or made publicly available.
Previously, information emerged online about a leak of the Kundelik user database, an analogue of the Russian "Dnevnik.ru" system. At least thousands of records became publicly accessible, containing the full names of schoolchildren, dates of birth, names of educational institutions, and class details.
The administration of the Kundelik electronic diary denied the information about the leak of users' personal data.
Later, the Ministry of Artificial Intelligence and Digital Development also found no evidence of hacking into the Kundelik diary system.