Kazakhstan fines Daryn.online over data breaches, finds no 4.2m leak
This digest was compiled by AI from multiple sources — links to the originals are below.
Kazakhstan’s data protection authority has fined online education platform Daryn.online after an inspection found breaches of personal data processing rules. The probe did not confirm a reported leak of 4.2 million user records, as the platform’s database holds only about 90,000 records.
Violations and Penalty
Inspectors from Kazakhstan’s personal data protection authority discovered that Daryn.online gathered an excessive volume of personal data, failed to obtain proper consent from users, and lacked adequate organizational and technical security measures. The platform was held administratively liable and fined, though the exact sum was not disclosed.
The Alleged Leak
In mid-July, a database purportedly containing 4.2 million Daryn.online user records appeared on darknet forums. The regulator’s audit revealed that the platform’s information system holds only around 90,000 records in total, making a leak of that magnitude impossible. The claimed breach was therefore not substantiated.
Broader Data Protection Context
The regulator noted that such violations are common in the private sector, including excessive data collection, lack of user consent, missing internal policies, and weak IT security. More inspections of private companies are likely to follow.
What's Next
The data protection authority is expected to conduct more inspections of private sector platforms in the coming months. It remains unclear whether Daryn.online will challenge the fine, and the episode is likely to heighten scrutiny of how Kazakh education technology companies handle personal information.
1 source
Kazakhstan fines Daryn.online over data breaches, finds no 4.2m leak
