Ministry of Digital Transformation Denies Data Breach from Diia
The Ministry of Digital Transformation of Ukraine has denied rumors regarding a data breach from the «Diia» application: «the files being circulated are forgeries and do not originate from the Diia systems, nor are they the result of any hacking or leak».
This was reported by the Ministry on Facebook.
«Following information about a possible leak, our team conducted an investigation and determined: the published files are forgeries and have no relation to the Diia system», noted Vitaliy Balashov, Deputy Minister of Digital Transformation for cybersecurity and cloud technologies.
He stated that the published files are a mixture of previously known leaks from commercial sources that have been manually edited and supplemented with fake records to make them appear as a «new» database.
«This is typical practice on the black market: old leaks are «refreshed» with fake records to pass them off as a new massive leak and mislead people. We consider the dissemination of fake files as a coordinated attack attempt on Diia and an undermining of trust in government services», Balashov added.
The Ministry also emphasized that «Diia» does not store personal data - the system operates on a data-in-transit principle: information is pulled from state registers at the time of request and is not accumulated in the application or on the portal.
«As confirmation, in March 2024, the code for Diia was made public. It is available to everyone, and anyone can verify that it does not contain hidden databases of citizens», the Deputy Minister emphasized.
Previously, reports circulated that an archive containing personal information of over 20 million citizens of Ukraine had been discovered online.
According to the Ministry, the information about the leak of personal data of Ukrainians during the testing of the e-Notary system is not true - Ukrainians' data is securely protected.