Civil Service Commission of Azerbaijan

The Civil Service Commission of Azerbaijan operates as a governmental body responsible for managing civil service functions within Azerbaijan's public administration framework. Its core responsibilities include overseeing personnel management systems, maintaining employment records, and administering identification documents for civil servants and citizens engaged with government services. The commission handles sensitive personal data integral to national administrative operations, including citizen identification details, passport information, and employment credentials. This operational scope positions it as a critical node in Azerbaijan's governance infrastructure, with direct involvement in safeguarding citizen data and supporting public sector workforce management.

A significant cybersecurity incident in January 2016 underscored the commission's exposure to regional threats. The Monte Melkonian Cyber Army, a group linked to Armenian actors, executed coordinated cyberattacks against Azerbaijani government entities, including the Civil Service Commission. Attackers deployed DDoS tactics to disrupt services and breached servers to exfiltrate databases containing tens of thousands of citizens' personal records. Compromised data included names, email addresses, encrypted passwords, ID card details, and passport copies, which were subsequently leaked publicly. The breach caused substantial operational interruptions to government services and amplified geopolitical tensions amid ongoing regional conflicts. This incident highlighted vulnerabilities in the commission's digital infrastructure and its role as a custodian of high-value citizen data targeted by politically motivated threat actors.