Alleged Leak of 109 Million Turkish Citizen Records Containing National Identity Data
🧩 Standalone API Access Now Available
Access high-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more – independently from the above standard subscriptions.
View API AccessUnlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Quick Facts
Incident Overview
A threat actor using the handle "buadamcokfena" posted on BreachForums on January 10, 2026 claiming to be selling comprehensive Turkish citizen data containing approximately 109 million records. The threat actor states this is official government data for the whole of Turkey, not from a third party.
- Total Records: Approximately 109 million (20GB) of Turkish citizen data
- Data Source: Claimed to be official government data for the whole of Turkey, not from third party
- Personal Information: Name, surname, national identity card number (kimlik kartı numarası), physical address, apartment address
- Family Information: Mother's name, mother's mother name, father's name, entire family relationships and complete family tree data
- Access Method: Contact via private message if link is dead
- Note: Threat actor requests checking everyday if link is dead and promises to fix it
Breach Claim URL
Unlock Exclusive Cyber Threat Intelligence
Powered by DarkWebInformer.com
Foundational access to breach intelligence. Track breaches, leaks, and threats in real time with high quality screenshots and concise expert summaries.
Continuously updated breach reports and threat summaries.
Daily breach, leak, and DDoS alerts.
Live tracking with JSON export.
Direct access to claims and posts.
Concise summaries of DDoS, defacements, and breaches.
Verified index of dark web sites and services.
Live status of 500+ sites.
Integrated checks inside breach posts.
Uncompressed, watermark free evidence.
Browser alerts for tracked terms.
Dark Web Informer © 2026 | Cyber Threat Intelligence