Payments.mystream.uz

In early 2024 a significant data exposure occurred involving the Uzbekistani payment processing platform Mystream. The incident originated from an unsecured database associated with the payments.mystream.uz subdomain. The leak exposed sensitive transaction logs and personal details of users who utilized the service for digital payments and streaming subscriptions. Security researchers identified that the records were accessible without authentication due to a misconfigured server environment. The exposed data included personal identifiers and financial transaction metadata which could be exploited for targeted phishing and financial fraud against the affected customers in Uzbekistan.