Data stolen in cyberattack on TurkNet leaked: Far more than the announced figure
Customer data stolen during a cyberattack on internet service provider TurkNet between February 26 and March 11, 2025, has been published on an underground forum. The leak revealed that the scale of the attack was much larger than what the company had disclosed to the public.
12punto
The shared files revealed thatfarmore people's data was seizedthan the companyhadannounced.
According to the report by Ali Safa Korkut from Veriler Ne Diyor,According to the statement made by TurkNet on March 13, 2025,the companyreportedto the Personal Data Protection Authority (KVKK) that the data of 244,396customershad been stolen.However, access to the files shared on October 28, 2025, by a hacker using the alias "dejavu"According to the data, the number of customerswhose information was leakedis2,806,546.
Korkut used the following expressions in his post:
“TurkNet reported to thegovernment that the data of 280,000 userswas compromised. was stolen. Inreality, this numberwas 2.8 million and theydid not close the securityvulnerabilities.”The main leaked file contains
data between April 1, 2008, and September30, 2024.who were TurkNet subscribersreal persons and legalentities a largeamount of sensitive information was included.
WHICH DATA WAS STOLEN?
StolThe stolen data includes a total of 69 different types of data, such as Turkish ID numbers, ID serial numbers, passport numbers, parents' names, place and date of birth, address information, latitude-longitude coordinates of home addresses, static IP addresses, internet speed information, subscription and tariff details, and system transaction logs. The stolen data includes a total of 69 differenttypes of datafound in the leak.