49mil Data Breach involving Turkish Citizens !

Hi everybody,

Private data of 49,611,709 Turkish citizens have been breached, offering download links to anyone interested.

A Romanian IP address 185.100.87.84 hosted, the 1.5GB compressed (6.6GB uncompressed) database and was offered via P2P, and was streamed by over 650 users at one point.

The hacker who set up the download server said the data contained the following information: first and last names, national identifier numbers (TC Kimlik No), the user’s mother and father’s first names, gender, city of birth, date of birth, full address, and ID registration city and district.

All the leaked information is the standard details found in a Turkey ID card, so the leak is not very dangerous but neither is it safe. The source of the data is currently not identified, but could be very well from a public administration agency that deals with user information.

The details of Recep Tayyip Erdogan, Turkey’s current president and former prime minister were presented to prove the validity of the data and the breach could be politically motivated.

The hackers wrote in an opening statement: “Who would have imagined that backwards ideologies, cronyism and rising religious extremism in Turkey would lead to a crumbling and vulnerable technical infrastructure?”

Following which, the hacker noted “lessons” to learn from this leak.

First he said that “bit shifting isn’t encryption,” alluding to the fact that the data was improperly protected.

The second was “Index your database. We had to fix your sloppy DB work.” Non-indexed databases show poor  programming skills, and could imply why encryption wasn’t properly used

Hackers also showed how they got in: “Putting a hardcoded password on the UI hardly does anything for security.” They didn’t specify in what UI, though.

There was a political message at the end. First, the hackers said “Do something about Erdogan! He is destroying your country beyond recognition,” also added “We really shouldn’t elect Trump, that guy sounds like he knows even less about running a country than Erdogan does.”


Source: Akati

Comments are closed.