9 ms·
Turkish citizens' personal data offered online after government site hacked
- activiation 3y agoWebsite sorgupaneli.org down
- hashworks 3y agoThis isn't the first time, it happened before sometime in 2015 I think?
- melvinmelih 3y agoYep, I was able to find my family's records in that leak...
- chalcolithic 3y agopffft Amateurs Russian citizens' personal data is sold online before government site gets hacked
- deleted 3y ago[deleted]
- deleted 3y ago[deleted]
- kryptiskt 3y agoIn Sweden you can just buy all that data legally because it's all public information.
- UberFly 3y agoAll the citizens' personal data is public information? Medical records as well?
- daniel-cussen 3y agoI think on the contrary Russians alone don't get hacked by Russians. Russians get hacked by the Terman lab. NSA...CIA...NRLO i think...yeah those guys.
- SXX 3y agoThat's true. In Russia databases of passport data sold on DVD on local markets long before government had any real online services.
- morkalork 3y agoIf you take what bellingcat posts at face value, the amount of data about Russian citizens for sale is absolutely comical: https://www.bellingcat.com/resources/2020/12/14/navalny-fsb-methodology/ https://www.bellingcat.com/resources/2020/12/14/navalny-fsb-...
- SXX 3y agoIt's mostly not actual leaks though. Just result of countless government beuracrats working for $300 / month. Considering fact that some people going to die on frontlines for $3000 / month leaking bunch of data for $100 is no brainer. To give an example. Since authoritarian regime like databases every hospital have to put data about every appointment or vaccination into regional online database. So every single doctor, technicial or their friend have names, national insurance ID, home adress and passport data for every single person who ever used medical services in that region. And since every phone number at least supposed to be registered on passport data it's super easy to connect any other non-government data leaks to specific person.
- contingencies 3y agoSame in China.
- erenkaplan 3y agoThey never claimed the data…
- treesciencebot 3y agoBe aware that the website(s) tied to this event has been down for quite a while and there are no concrete evidence that any of them have really worked. There were a few leaks back in the 2010s but nothing recently has come up (lots of claims, no real proof).
- belter 3y agoJoin the party... "Every Netherlands resident affected by data leak: watchdog" - https://nltimes.nl/2023/06/06/every-netherlands-resident-affected-data-leak-watchdog https://nltimes.nl/2023/06/06/every-netherlands-resident-aff... "Medical Data of 500,000 French Residents Leaked Online (2021)" - https://www.infosecurity-magazine.com/news/500k-french-medical-records-leaked/ https://www.infosecurity-magazine.com/news/500k-french-medic...
- smcin 3y agoThe Netherlands headline is alarmist and the full facts are not in yet: they did not say "all residents' data had been leaked; the number affected estimated at is 2+ million (population 17.5m). [0] . The Dutch DPA did say they should use a different password everywhere, use secure login, request organizations to delete their data... "Citizens must assume that their personal data has already leaked or that this will happen at some point". Meanwhile: back in May 2020 a Dutch hacker obtained virtually all Austrians' personal data (full name, gender, address, DOB), police say [1] [0]: https://www.iamexpat.nl/expat-info/dutch-expat-news/millions-affected-dutch-data-breach-heres-what-we-know-so-far https://www.iamexpat.nl/expat-info/dutch-expat-news/millions... [1]: https://www.reuters.com/world/europe/dutch-hacker-obtained-virtually-all-austrians-personal-data-police-say-2023-01-25/ https://www.reuters.com/world/europe/dutch-hacker-obtained-v...
- namaria 3y agoThese days you just have to assume every piece of personal data (and meta data about your online activity) eventually is made public.
- ClumsyPilot 3y agobut your bank still uses ut to confirm your udentity over the phone
- usdogu 3y agoIt's not suprising. Turkish citizens' data is in the hands of 13 y.o kids since 2015.
- x7ci 3y agoThis is unfortunately true. The "MERNIS" leak is freely available, containing some 49M citizens with their ID card numbers, addresses and a lot more.
- phantom32 3y agoI think there have been multiple leaks in the past, and this website is not the first either...
- mrtksn 3y agoTurkey's govt actually has quite a robust IT infrastructure and the Turkish citizens can do pretty much anything through the turkiye.gov.tr portal. It's really useful, you can even cancel subscriptions to services and utilities from there. You can book appointments for documents services or hospitals, see all your medical history or even heritage records. These leaks keep appearing since many years but their origin is not necessarily a hack of the government infrastructure. The leaks usually occur at election cycles because the address based electorate data is handled and processed by the political parties(which are not exactly IT elites) and gets stolen or leaked. Then there were high profile hacks of large food delivery services or other e-trade platforms. All this resulted in people collecting and merging data from multiple leaks and re-selling those. Edit: At some point, all the lawyers were using this data to track down people relevant to their court cases. They were selling it in CD format back then. Scammers and other criminals probably use this data too.
- mghfreud 3y agoDo the data shared with political parties contain real estate deeds?
- mrtksn 3y agoI'm not sure what exactly it contains but all those leaks contain Name, Address and your national identity number(something like social security number). It must also contain the birthplace and date because the last elections there was question over how many refugees got citizenship and the opposition said they checked the birthplaces and the number is not too high. BTW, this data is available for the citizens too during the election cycle so you can check who lives in the same building with you and correct any mistakes. The list of the electorate is also attached at the polls so anyone can check for something fishy. Then in Turkey there's this obsession with companies about collecting as much as info possible about you, so when the food delivery service is hacked the hackers now can easily add your phone number, update your current address by matching your national identity number because for some reason they need to have that info to deliver some kebab. Also, this national identity number is generated through some algorithm which gives away your relatives and thanks to this, the hackers can also build your social graph from the leaks. Here is a repo about that algo: https://github.com/kerematam/akrabatcno https://github.com/kerematam/akrabatcno AFAIK it’s used in “your grandson had an accident and needs emergency surgery, send this much money ASAP” scams.
- data_maan 3y agoWasn't there a similar breach in India a few years ago? There should be a clause that governments have to step down if breaches like that happen. But until leaders, like Erdogan, themselves get doxxed and trolled, probably nothing will be done.
- mrguyorama 3y agoOr, you know, people could stop voting for authoritarian assholes who don't care if bad things happen to average people because that's not why they are in government anyway.
- mediumdeviation 3y agoThe prime minister of Singapore was the target of a breach against a healthcare provider in 2018 https://en.wikipedia.org/wiki/2018_SingHealth_data_breach https://en.wikipedia.org/wiki/2018_SingHealth_data_breach
- orhmeh09 3y agoI can sell to you the Turkish president's address for a small price of $1000. PM for details.
- boeingUH60 3y agoI heard he lives in a giant palace!
- devsda 3y agoI think you are aiming for accountability but making a government step down for data breach is unrealistic and has many unintentional consequences. In security you can account for many factors except the human factor. If there's sufficient incentive like automatically bringing down the government, you are painting a huge target on the hardware & software infrastructure for both internal(political rivals) and foreign entities(think governments with significantly more resources). There will always be at least one weak human link that can be exploited and that's far less price compared to what was done historically to topple governments.
- m00dy 3y agogreat, thanks. I'm now famous.
- lr4444lr 3y agoWhy haven't the authorities moved in on the host of the site offering the data?
- 3327 3y ago[dead]
- RajT88 3y agoThe government has been silent on this so far, but I suspect the underlying story could be described as 'Byzantine'.
- denton-scratch 3y ago<groan>
- 19h 3y agoIs that old information? I’m sure I have a dump on most Turkish civilians from a few years back… it also includes data on Erdogan, his birth place and ID number.
- commitpizza 3y agoMy country publishes everyones data which then is offered by a number of services: https://mrkoll.se https://mrkoll.se as an example. I wrote a blog article about it: https://commit.pizza/2022/10/16/the-only-way-of-being-anonymous-in-sweden-is-illegal/ https://commit.pizza/2022/10/16/the-only-way-of-being-anonym...
- davnn 3y agoDo you see any negative aspects in day to day life since the data is published?
- lancebeet 3y agoAn aspect of this that some people find problematic is that many employers use these services to do background checks on individuals before hiring. Background checks are of course customary for some positions, in which case official police records will be retrieved with the candidate's knowledge or consent. For positions where background checks haven't historically been customary, these services will often be used instead, since they are much faster and cheaper in terms of administration, don't require consent and don't notify the candidate that they have been used, and (at least in the past) show offenses that no longer show up in the official records.
- hackernewds 3y agoWhat about stalkers?
- commitpizza 3y agoYes, people can look you up and threaten you and that has happened to me more than once now. Criminals use it a lot which is increasingly a large problem due to the mass immigration that has sky-rocketed violent crimes in our country. They also use it to hijack peoples identity (haven't happened to me), since the social security number is available to everyone.
- xwdv 3y agoA lot of this stuff is readily available in the right Telegram groups.
- emmelaich 3y agoProbably not related but I found a weird search result with many Turkish sites. Google search for "faegulas" results in many different .tr sites with personal data of USA people. The sites are all of the form <8randomletters>.<4random>.(info|com|net|gen).tr All seem to be blocked by Cloudflare though. [edit -- could be fake, generated data. but why]
- postexitus 3y agoThis is very weird. .com.tr and and .org.tr registrations in Turkey are heavily bureaucratised with proofs of actual trademark ownership required and humans involved. So it is unlikely that these 4 letter domains could be automatically registered. The clouflare block is also odd. Could this be a DNS attack on Google on non existing domains?
- deleted 3y ago[deleted]
- emmelaich 3y agoMy guess is that they're all govt sites and used somehow in censorship or honey-trapping.
- boringuser2 3y agoThis happened in the US as well many a time.
- kodah 3y agoI'm curious if leaks like this are used to validate directory style websites or if they purely function off of official public records requests and releases. There's a special place in hell for people who leak PII.
- greentext 3y agoSometimes for research purposes https://en.wikipedia.org/wiki/AOL_search_log_release https://en.wikipedia.org/wiki/AOL_search_log_release
- T3RMINATED 3y ago[dead]