‘Virgin list’ scandal returns to Central Asia’s largest university
The Almaty Prosecutor’s Office has launched an investigation into a new leak of personal and medical data involving students at Al-Farabi Kazakh National University.
A university adviser told Ulysmedia that documents containing the personal data of female students and staff — including highly sensitive medical information — have been circulated among faculty advisers.
Such disclosures violate personal data protection laws and basic ethical standards, and could cause serious psychological harm. The documents reportedly include information about students hospitalized for miscarriages and uterine bleeding.
Second major data breach in two years
This is the second high-profile incident of its kind at the university. In 2024, a so-called «virgin list» surfaced online, containing medical data about female students, including information about their virginity.
Specifically, screenshots posted online showed consolidated lists of students who had undergone medical examinations, including their full names and individual identification numbers. The final column, labeled «examination room,» included the notation «virgo» next to some students.
Read also: Viral ‘Quittr’ app leaks masturbation habits of 600,000 users.
Prosecutors at the time opened a criminal case over violations of privacy and personal data laws.
Trust concerns grow
The repeated leaks risk damaging the university’s reputation and eroding trust among students and staff. The situation is especially sensitive given the intimate nature of the information involved.
The recurrence of such a scandal within two years raises concerns about the effectiveness of data protection measures at the institution.
Legal review and past disciplinary action
The prosecutor’s office said the current investigation will include a legal assessment of the actions of university employees responsible for safeguarding personal data.
Following the 2024 incident, dean’s office staff were dismissed for their role in leaking students’ medical information. The university also said it would terminate its contract with the medical center that provided services to students.
