Mernis.tar.gz !free!
To understand what the file is, it helps to dissect its name through standard computer science and Unix paradigms:
In early 2016, a massive 6.6-gigabyte compressed file named mernis.tar.gz surfaced on the internet. When uncompressed, the file expanded into an unencrypted database containing the records of roughly 49.6 million Turkish citizens. Given Turkey's population at the time, the file effectively held the personal data of nearly every adult citizen in the country.
: After extraction, you can inspect the contents to understand what the archive includes:
The database essentially contained a snapshot of Turkey's eligible voting population, as matching analyses later revealed the data closely correlated with official voter registration lists from around 2008 to 2009. Notable public figures, including President Recep Tayyip Erdoğan and Prime Minister Ahmet Davutoğlu, had their full ID details prominently displayed on the hackers' landing page as proof of the data's authenticity. 3. Origins and Technical Vulnerabilities
Tell you more about this kind of data.
System administrators sometimes archive old project folders using tar and gzip. If a team was working on a MERNIS integration project in 2015, they might have named the archive mernis.tar.gz and stored it in a backup directory.
:
The breach was a major embarrassment for the Turkish government, especially as it included the personal details of high-ranking officials like President , Prime Minister Ahmet Davutoğlu , and former President Abdullah Gül .
The archive typically includes sensitive data such as National ID numbers (TC Kimlik No), full names, parents' names, gender, city of birth, birth dates, and full home addresses File Size: The compressed file is roughly 1.4 GB to 1.5 GB , which expands to approximately mernis.tar.gz
The leaked database was remarkably comprehensive, exposing critical personal identifiers including: Full names and parents' first names Dates of birth and birthplaces Full home addresses
: If you are analyzing such an archive in a Linux/Unix environment:
Why it exists
Move the file to a sandbox environment (a virtual machine with no network access or an isolated container). To understand what the file is, it helps
The file is effectively a snapshot of the Turkish population's identification records. When extracted, the contained .sql file represents a highly detailed, structured database of over 49-50 million citizens. The 2016 Mernis Data Breach Details
A hacking group known as (sometimes referred to as Bozkurtlar or The Grey Wolves) claimed responsibility. While the group had nationalist affiliations, their motives were ostensibly to protest government corruption and lack of transparency. However, other reports suggested the data was initially obtained by external actors and eventually found its way onto the open web.
The data was purportedly obtained from the Mernis system, making it one of the largest leaks of national personal information in history at the time.
Attackers use accurate personal data to create convincing phishing scams, targeting individuals with information that seems legitimate. : After extraction, you can inspect the contents