Kyrgyzstan FOMS 2019

In 2019 the database belonging to the Compulsory Medical Insurance Fund of Kyrgyzstan was discovered in open access. The incident involved an unprotected server that exposed personal information of millions of citizens. The essence of the breach was a misconfigured database that allowed public access without authentication. The leaked data includes full names, dates of birth, and personal identification numbers which function as individual tax identification numbers in the country. This scale of exposure represents a significant portion of the national population and poses risks related to identity theft and fraudulent use of government identification data.