The key facts

  • On October 28, Telegram reported a leak of data from SafeRoad, Delever, inDrive and other services
  • SAFE Service (formerly SafeRoad) denied the leak, saying the data had been collected before the app was launched
  • The Interior Ministry is conducting an investigation jointly with the State Security Service's Cybersecurity Center and Autodoc

Reports of the leak and what they claimed

On October 28, social media saw reports of a leak of user data from a number of online services. The Telegram channel Nuruddin Blogs reported, that it had checked the data circulating online and found in it information on numerous websites, including Delever, Lada Auto, SafeRoad, inDrive, Kiwitaxi, Fargo, Maktab.uz, Andalus and Urbandiler.uz; screenshots of the data were distributed via bots. Blogger Shukhratbek Kurbanov (Kurbanoff.net) wrote that personal identification numbers (PINFL) may have leaked online, along with data on vehicles connected to the app, driver's license numbers and vehicle registration certificates. «One would hope that the relevant organizations are already aware of this and have begun investigating the sources of the leak,» he noted.

The company's response

Autodoc, the company that developed the SAFE Service app (formerly SafeRoad), issued a denial. According to its statement, the data allegedly put up for sale «had been collected from various sources long before the app was launched» and «have no connection to the company». User data, the company said, «is stored on secure servers in accordance with the law and transmitted in encrypted form». The company called publications using the old SafeRoad logo «an attempt at unfair competition» and urged people not to trust them: since September 1 the service has operated under the SAFE Service brand following a rebranding. Both the company and the Uzbek-language version of the Spot.uz publication reported that work on the matter was underway «jointly with the authorized state bodies».

The Interior Ministry's investigation

On October 29, the situation was commented on by the Interior Ministry: the agency announced a joint investigation involving the Cybersecurity Center under the State Security Service and the company Autodoc. Law enforcement will establish the veracity of the publications, determine their sources and the circumstances of their distribution, and check for the presence or absence of facts of personal data leaks from SAFE Service and other services. Following the investigation, the Interior Ministry promised to provide additional information; if the leak is not confirmed, the agency will report on the reasons the reports appeared and their sources.

Context

This comes against the backdrop of a series of incidents involving the data of Uzbek citizens: in February 2026, reports emerged of citizens' data being distributed, including on darknet sites, after which Digital Technologies Minister Sherzod Shermatov announced a cyberattack on the information systems of three government agencies, as a result of which the data of about 60,000 citizens leaked. Thus, at present there are two versions: the reports of a leak from SafeRoad and the company's denial, and the final answer must come from the ongoing Interior Ministry investigation — its results have not yet been published.