Have you ever imagined what would happen if a database was leaked containing all the personal data of all the citizens of an entire country?
Today was the day that this happened (at least, hackers claim that it has happened, it’s not confirmed by the Turkish government itself). Personal data of more than 49 million Turkish citizens leaked on to the internet, viewable for everyone (I’m not going to link to it but it should be pretty easy to find when searching Twitter). The database contains personal data like for example, someone’s full address and National Identifier.
The entire list of leaked personal data:
- National Identifier (TC Kimlik No)
- First Name
- Last Name
- Mother’s First Name
- Father’s First Name
- Gender
- City of Birth
- Date of Birth
- ID Registration City and District
- Full Address
What happened?
The hackers mentioned the following at their “website”:
“Putting a hardcoded password on the UI hardly does anything for security.”
Which probably means that the hackers found a password in the html source of the website (want to check? right-click -> view-source)
How old is this data, and where did they get it?
The data seems to be from somewhere between 2007 and 2009. It might be the leaked data from a hack in 2010. That year there was a news article about a “leak” of data from the MERNİS Project (Mernis is the Central Registration Administration System of Turkey). It could be possible that this might be a cleaned and optimised version of that leak.
sources:
.jpg)
.jpg)
%204.jpg)
%202.jpg)
%203.jpg)
%20cyber-attack%20.jpg)
Written by Zerocopter
April 4, 2016
Share this blog:
