2025 TurkNet — customer database breach; 1.5M+ confirmed (actor claimed 2.8M)
Data compromised
Full names, phone numbers, national ID numbers, addresses, subscription numbers, and static IP addresses per TurkNet customer notice; company stated financial data and passwords were not compromised
Technical writeup
Verified breach — March 11–13, 2025. TurkNet (Turk.net), one of Türkiye’s largest internet service providers, detected a cyberattack on its customer database on March 11. Actor hades_hgs claimed responsibility on a criminal forum, threatening to publish roughly 2.8 million customer records unless TurkNet paid 3 Bitcoin within 24 hours. TurkNet emailed customers March 13 confirming sensitive personal data for more than 1.5 million subscribers was exposed, including names, phones, national ID numbers, addresses, subscription identifiers, and static IPs, while stating passwords and financial data were not compromised and services were uninterrupted. The company reported the incident to Türkiye’s Personal Data Protection Authority and ICT regulator and pursued legal action. BreachHistory uses TurkNet’s attested 1.5M+ figure; the actor’s 2.8M marketing claim remains unverified.
Root cause
Cyberattack on TurkNet customer database detected March 11, 2025; actor hades_hgs claimed responsibility and demanded 3 BTC ransom on a dark-web forum