Presupuestos
En 24 horas

Mernis.tar.gz <2027>

The file mernis.tar.gz is a notorious compressed archive containing a leaked database of approximately 49.6 million Turkish citizens. Originally surfacing in April 2016, it is widely considered one of the largest data breaches in Turkey's history, exposing the personal information of nearly two-thirds of the country's population at the time. Database Overview

The archive contains a massive trove of sensitive, unencrypted personal data. Total Records: ~49,611,709 unique Turkish citizens.

File Size: Approximately 1.5 GB compressed (mernis.tar.gz) and 6.6 GB uncompressed. Data Structure: Primarily distributed as a MySQL database. Key Data Points Exposed: National Identifier (TC Kimlik No) Full First and Last Names Mother and Father’s First Names Gender, Date of Birth, and Place of Birth Detailed Residential Addresses Origins and Authenticity

The Source: While the name "MERNIS" refers to Turkey’s Central Civil Registration System, government officials initially claimed the leak did not originate directly from MERNIS. Instead, it is believed to have come from a 2009/2010 electoral register shared with political parties.

Verification: The Associated Press partially verified the data by matching 8 out of 10 non-public ID numbers against names in the database.

High-Profile Targets: The leak explicitly highlighted the personal details of high-ranking officials, including President Recep Tayyip Erdoğan and Prime Minister Ahmet Davutoğlu, intended as a political taunt against the government's infrastructure security. Critical Risks and Impact

Important notes if you obtained this file:

  1. Sensitive Data: MERNIS contains personal information (Turkish ID numbers, names, addresses, family records). Possessing or distributing such data without authorization is illegal under Turkish Law No. 6698 (KVKK) and may constitute a criminal offense.

  2. Purpose: If you are an authorized user (e.g., government agency, approved researcher, or system administrator), the report might include population statistics, audit logs, or registry extracts.

  3. Security Warning: Do not open or extract this file on an internet-connected device unless you are certain of its legal source and your authorization. If obtained from an untrusted source, it could also contain malware. mernis.tar.gz

If you believe you legitimately need to analyze this file:

If you are not the authorized recipient: Do not open, share, or copy the file. Report the incident to your IT security team or the relevant data protection authority.

Would you like guidance on safely handling a compressed archive, or do you have a specific question about the hypothetical contents (e.g., report format, anonymization, or parsing)?

The file mernis.tar.gz (or mernis.sql.tar.gz) is the primary archive associated with one of the largest data breaches in Turkey's history. Released around April 2016, it reportedly contains the personal information of nearly 50 million Turkish citizens—roughly two-thirds of the country's population at that time. Breach Overview

Contents: The 1.5 GB compressed archive includes sensitive identifiers such as National ID numbers (TC Kimlik No), full names, dates of birth, places of birth, and complete residential addresses.

Targets: The leak famously included the personal details of high-ranking officials, including President Recep Tayyip Erdoğan and former Prime Minister Ahmet Davutoğlu.

Origins: While government officials initially dismissed it as an "old story" from 2010, subsequent investigations suggested the data might have been shared by the election authority with third parties before being leaked. Security Impact

Privacy Threats: Automated processing of the leaked data has allowed researchers to uniquely identify even more sensitive information, such as mother's maiden names and landline numbers.

Scamming Risks: The availability of this data has significantly increased the risk of identity theft and provided scammers with enough information to conduct highly convincing social engineering attacks. The file mernis

Political Motivation: The site that originally hosted the leak contained political messages criticizing the Turkish government’s technical infrastructure and leadership. Technical Details of the File

Format: A .tar.gz file is a compressed archive created by the tar utility and then compressed using gzip.

Management: If you are analyzing such an archive in a Linux/Unix environment:

View contents without extracting: Use the command tar -ztvf mernis.tar.gz. Extract: Use tar -xvf mernis.tar.gz.

Note: Handling or downloading this specific dataset may be illegal in various jurisdictions due to privacy laws and its status as stolen data. List the contents of a tar or tar.gz file - nixCraft

The leaked database was remarkably comprehensive, exposing critical personal identifiers including: National Identity Numbers (T.C. Kimlik No) Full names and parents' first names Dates of birth and birthplaces Full home addresses

While the file became widely available in 2016, technical experts and Turkish officials suggested the data actually originated from electoral records around 2008 or 2009. The hackers who hosted the file on an Icelandic server accompanied it with a politically charged message criticizing the Turkish government's technical infrastructure and leadership. Political and Security Implications

The breach was a major embarrassment for the Turkish government, especially as it included the personal details of high-ranking officials like President Recep Tayyip Erdoğan, Prime Minister Ahmet Davutoğlu, and former President Abdullah Gül.

Alternative: The Developer Solution (Mock Data)

If you are looking for this file to test an application that requires Turkish citizen data structures (Names, Surnames, TC Kimlik No format), do not use real data. Purpose: If you are an authorized user (e

You can generate fake but structurally accurate data using libraries.

Python Example (Faker Library):

from faker import Faker
fake = Faker('tr_TR') # Turkish locale

for _ in range(10):
print(f"Name: fake.name()")
print(f"Address: fake.address()")
# Note: Faker doesn't generate valid TC numbers by default,
# but custom algorithms exist for validating the format (mod 10/11 checks).

JavaScript/Node.js:

const faker = require('@faker-js/faker/locale/tr');

console.log(faker.name.findName());
console.log(faker.address.city());

Technical Guide: How to Inspect mernis.tar.gz

If you have downloaded this file for educational or analysis purposes in a secure environment (like a VM), follow these steps to inspect its contents safely.

Case A: The 2016 Leak Allegations

In 2016, rumors surfaced of a massive breach involving MERNIS. A file named mernis.tar.gz was alleged to contain records of over 50 million Turkish citizens. While Turkish authorities denied a direct breach of the central system, cybersecurity firms traced the file back to compromised integrations—third-party applications, municipal servers, or poorly secured APIs that had legitimate access to subsets of MERNIS data. The .tar.gz file became the poster child for "indirect breach" data aggregation.