2024 Kazakhstan regulatory order — Halyk among banks singled out for mobile-app information-security violations
Data compromised
Potential for customer-session or credential handling weaknesses (not quantified as exfiltration in cited trade summaries)
Technical writeup
June 2024 trade coverage summarized Kazakhstan authority findings that five major banks, including Halyk, had mobile-application security defects requiring remediation—supervisory infosec deficiency rather than a public ransomware confirmation.
Root cause
Insecure mobile application implementation / compliance gaps flagged in supervision