Details of almost 50 Million Turkish citizens have been leaked online, the bulk data was hosted on a server with the IP address 126.96.36.199. The archive was published during the weekend, the publishers claim they it belongs to 49,611,709 Turkish citizens, the complete 1.5GB archive (mernis.sql.tar.gz – 1.5GB compressed – 6.6GB uncompressed) is available for download on both Torrent and Magnet URL.
The archive includes also the personal details of the President Recep Tayyip Erdogan.
The above data is usually included in a standard Turkey ID card, but at the time I was writing it is not known the source of the personal information data is currently unknown.
It is not clear if the archive was populated with older data from other security breached, like the one that suffered the country in 2009.
Experts speculate that data have been stolen from a government agency managing data of Turkish citizens.
Below the message left by the hackers that appear to be politically motivated:
“Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure?”
Hackers have something against Erdogan, … and Trump
Lesson to learn for Turkey:
Hackers have found a baffling situation, it seems administrators hardcoded the password in one of the user interface they accessed.
“Putting a hardcoded password on the UI hardly does anything for security.”
(Security Affairs – 50 Million Turkish Citizens, data breach)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.