Mernis.tar.gz
mernis.tar.gz (often found as mernis.sql.tar.gz ) is a notorious compressed archive containing a leaked database of personal information for approximately 49 to 50 million Turkish citizens Ekşi Sözlük Background and Leak Details The data originated from the Central Civil Registration System Merkezi Nüfus İdare Sistemi ) of Turkey. Leak Event:
What was inside:
Once extracted (to roughly 6.6 GB), the database revealed detailed information for approximately 49,611,709 individuals. This included full names, national ID numbers (T.C. Kimlik No), parents' names, dates of birth, birthplaces, and registered home addresses. mernis.tar.gz
Generate MD5/SHA256 and compare against known databases (VirusTotal, Hybrid Analysis). mernis
Check for persistent crontabs or startup scripts
Human Rights and Privacy
: Discussing the long-term consequences for citizens, such as identity theft risk and the erosion of trust in digital public services. Kimlik No), parents' names, dates of birth, birthplaces,
In a DevOps pipeline, you might see a file like mernis.tar.gz as a cached dependency, an artifact from a Jenkins build, or a layer inside a Docker container that pulls MERNIS-related utilities.
For the average citizen, the consequences were alarming:
tag
Attackers name files for clarity—either for themselves or for their buyers. On darknet markets, stolen databases are advertised with descriptive names. mernis.tar.gz is immediately recognizable to any Turkish criminal group, data broker, or black-hat OSINT trader. The filename is a , indicating the exact origin and value of the contents.