Today we have spotted a massive leak of personal information containing 49,611,709 records with personal information of Turkish citizens. For the first glance, the data seems to be legit. The database dump in PostgreSQL format contains national identifier (TC Kimlik No), first and last name, mother’s name, father’s name, gender, city of birth, date of birth, ID registration city and district, full address.

A link to database was posted on Reddit today. The file name is mernis.sql.tar.gz (1,44 GB – compressed, 6,59 GB - uncompressed).

Currently we are investigating this breach to see, if it is connected to massive data leak of Turkish citizens, spotted in February 2016.

UPDATE

The torrent file with database was created on April 3, 08:36:31 AM (CET). Reddit was never the first public source of the leak, some Turkish websites reported this leak on April 3, just after the torrent file was available and published on http://185.100.87.84/.

The database contains information about citizens born before April 1991 (last birth date is March 29, 1991), which means that this is an old leak dated back to 2009.