A controversy has erupted following the exposure of approximately 19 gigabytes of sensitive data attributed to Syria’s Ministry of Foreign Affairs and Expatriates, including diplomatic correspondence, salary records, and personal information belonging to citizens and Syrians living abroad.
The contents of the leaked files have raised new questions about information security and internal oversight mechanisms within public institutions.
What was in the leaked files?
The reviewed material includes scanned documents, internal correspondence, letters, overseas mission payments, personnel salaries, and records related to furnishing expenses for offices inside Syria and at embassies and diplomatic missions.
The files also contain diplomatic cables, official correspondence between embassies and missions, immigration and visa documents, property records, and some financial papers belonging to citizens and expatriates.
Ministry launches investigation
The Ministry of Foreign Affairs and Expatriates announced that relevant units immediately began verification and auditing steps regarding the documents and correspondence alleged to have been leaked.
The ministry’s media and communications office stated that coordination has been established with technical teams and security agencies, and a comprehensive investigation is underway to uncover the source, method, and scope of the leak.
The statement emphasized that legal and judicial proceedings will be initiated if deemed necessary, the impact of the incident will be contained, and individuals whose responsibility is confirmed will be held accountable within the legal framework.
The ministry also reported that consular and diplomatic services are continuing normally and that additional measures will be taken to protect official documents and information security.
Official statement warns of manipulation
The media and communications office warned that some circulating materials may have been digitally altered, urging the public to rely on official sources.
Meanwhile, a source at the ministry denied the claim that the incident resulted from a cyberattack. The same source said it was not a technical breach of the ministry’s systems but a data leak carried out through a staff member working in an administrative office.
Experts point to insider threats and governance weaknesses
Data management specialist Mohammad Tawfiq Nahlawi said that data can turn into a dangerous tool when it falls into the wrong hands.
Nahlawi stated that he believes the incident exposed a fundamental vulnerability stemming from a lack of data management culture and a weak commitment to professional ethics. In his view, the issue is not solely a matter for the information technology unit but points to a security gap concerning the institution's entire administrative structure.
The expert said that because the leak includes diplomatic correspondence and personal data, it could cause long-term political and psychological harm, and repairing this impact will be difficult.
Nahlawi also drew attention to the possibility that access permissions were poorly supervised and that the leak may have occurred through physical access. In his view, data security in institutions must be treated not merely as a technical measure, but as an institutional responsibility encompassing every administrative unit.
A three-stage proposal for data security
Nahlawi argued that information security can be achieved not so much through large budgets, but through a strict administrative culture that treats information as a “sovereign asset.”
The expert said the first stage requires that every document undergo mandatory security classification and that sensitive data be encrypted the moment it is created.
In the second stage, he stated that the use of external storage devices should be prohibited, device ports should be closed, servers should be secured, and data sets should be partitioned.
He pointed to the third stage, where implementing access controls and audit logs is critical for tracking who viewed data and when.
