Turkey has a robust e-government system called (e-Government). Because the MERNIS ID is the master key to all other services, the leak of the ID numbers combined with addresses and birth dates compromised the integrity of many other digital services, forcing banks and government agencies to tighten their verification protocols (often adding SMS verification requirements that had previously been lax).
mernis.tar.gz └── mernis_dump_2023/ ├── tc_identity_full.csv (Columns: TC ID, Name, Surname, Father, Mother, BirthDate) ├── address_history.sql (INSERT statements for every registered address) ├── phone_links.json (Phone numbers hashed or plaintext, linked to TC IDs) ├── foreigner_records.dump (Residence permits, work visas, student IDs) └── readme.txt (Often includes timestamp, record count, and ransom note) mernis.tar.gz
The file mernis.tar.gz refers to a massive data leak involving the personal information of nearly 50 million Turkish citizens. This archive became a focal point of cybersecurity discussions globally, highlighting significant vulnerabilities in state-managed identity systems. The Leak Origin and the MERNIS System This archive became a focal point of cybersecurity
In April 2016, a website titled the "Turkish Citizenship Database" appeared online, hosting a compressed file (1.5 GB to 6.6 GB depending on the version) containing the private records of 49.6 million citizens. mernis.tar.gz
"mernis.tar.gz" is the filename of a widely circulated archive containing a massive leak of the Turkish Citizenship Database (MERNIS)