Mernis.tar.gz — Confirmed

With a citizen’s full name, ID number, and mother’s maiden name (a common security question used by Turkish banks), malicious actors possess the foundational building blocks for identity theft. Fraudsters have used this data to open unauthorized phone lines, apply for consumer loans, and set up fraudulent businesses. Advanced Phishing and Social Engineering

In April 2016, a group of hacktivists uploaded mernis.tar.gz to a publicly accessible website hosted on an Icelandic server and shared the .onion mirrors on dark web forums. The front page of the leak site contained political messaging mocking Turkey’s political leadership and criticizing the country's lack of basic data encryption and secure infrastructure. 3. Government Response mernis.tar.gz