In March 2026, in Astana and Almaty, the activities of a group of individuals suspected of illegally collecting and selling the personal data of Kazakhstani citizens via the internet were stopped. According to the investigation, the buyers may have included representatives of certain microfinance and debt collection organisations, as well as individuals.
WHAT HAPPENED
According to the National Security Committee (NSC), the operation was carried out in coordination with the prosecutor's office. Law enforcement agencies reported that they had stopped the activities of a group suspected of illegally handling citizens' personal data.
This concerns information which, according to the investigation, may have been obtained unlawfully and distributed via the internet.
WHO THE DATA MAY HAVE BEEN PASSED TO
The NSC noted that the buyers included some representatives of microfinance organisations, debt collection companies, as well as individuals.
WHAT WAS SEIZED DURING SEARCHES
During searches, law enforcement officers seized computer equipment, electronic data storage devices, a large sum of money, and other material evidence.
UNDER WHICH ARTICLES THE CASE IS BEING INVESTIGATED
A pre-trial investigation is currently underway under the following articles:
- Article 147 of the Criminal Code of the Republic of Kazakhstan (CC RK) — ("Violation of the inviolability of private life and the legislation of the Republic of Kazakhstan on personal data and its protection")
- Article 208 of the CC RK — ("Unlawful acquisition of information")
- Article 210 of the CC RK — ("Creation, use or distribution of malicious computer programs and software products").
Other information is not being disclosed in accordance with part 1 of Article 201 of the Criminal Procedure Code of the Republic of Kazakhstan.
WHY THIS IS IMPORTANT
The case concerns the protection of personal data — information that can be used to take out loans, aggressively recover debts, commit fraud, and carry out other illegal actions. Stopping such channels of data distribution is directly linked to the digital security of citizens.