Posts: 13
Threads: 0
Joined: Apr 2026
good job,
tnks for shareing....... This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Contact Administration.
Posts: 64
Threads: 0
Joined: Nov 2023
Posts: 3
Threads: 0
Joined: Apr 2026
This was a good leak. Many places offer content like this, but this is sufficient. Well doneThis forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Contact Administration.
Posts: 13
Threads: 0
Joined: Apr 2026
(Jan 04, 2026, 07:27 PM)dejavu Wrote: Hello BreachForums Community,
Today I have uploaded the Turknet Database for you to download, thanks for reading and enjoy!
https://external-content.duckduckgo.com/...693853.jpg
In March 2025, one of Türkiye's largest internet service providers, Turknet was breached by threat actor named "hades_hgs" who used SQL injection. Later this breach was found by @ dejavu and leaked on BreachForums. The exposed data contained over 2.8 million customers which included dates of birth, email addresses (custom ones), static IP addresses, names, National Identification Numbers, phone numbers and physical addresses. Small number of lines also included plaintext passwords and usernames. @ dejavu described the story of how he got the leak "7 months ago, an actor named hades_hgs found SQL injection on Turknet and was about to make a big leak when he gave himself away thanks to his stupidity. Before he was caught, he published an onion hidden service url with a countdown timer on the screen, the data was supposed to be published in about 3 days, but it was never published, probably the police accessed and disconnected the onion service. Before this onion service was shut down, I started testing by connecting the TOR socket to a directory fuzzer tool, the tool quickly detected that there was a path called "/files/" on the onion service, when I entered this path, I saw that the files belonging to the database were listed in that path and downloaded it, then I forgot that I downloaded this database, yesterday I saw the db while examining my files and now we are here" and accused Turknet of lying "Turknet reported to the goverment that the data of 280k users was stolen, but in reality there were 2.8 million, and they did not fix the vulnerabilities in their systems, so I did some research and found another SQL injection vulnerability, if someone who has just subscribed gives me their name, surname and date of birth, I can throw away the fresh subscription information"
Compromised data: Dates of birth, Email addresses (custom ones), IP addresses, Names, National Identification Numbers, Passwords, Phone numbers, Physical addresses, Usernames.
Contents Spoiler The .7z File's MD5 Hash is 6E77CB7B6BCB9F67B7D8AA78602647DA. In total, there are 2806537 records. The file is 3.64GB uncompressed and 692.94MB compressed.
This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Contact Administration.
Posts: 1
Threads: 0
Joined: Apr 2026
[quote="dejavu" pid='1240416' dateline='1767554820']
Merhaba BreachForums Topluluğu, Bugün Turknet Veritabanını indirmeniz için
yükledim , okuduğunuz için teşekkürler ve keyfini çıkarın! https://external-content.duckduckgo.com/...693853.jpg Mart 2025'te, Türkiye'nin en büyük internet servis sağlayıcılarından biri olan Turknet, SQL enjeksiyonu kullanan "hades_hgs" adlı bir tehdit aktörü tarafından saldırıya uğradı. Daha sonra bu ihlal @ dejavu tarafından bulundu ve BreachForums'ta sızdırıldı. Açığa çıkan veriler, doğum tarihleri, e-posta adresleri (özel olanlar), statik IP adresleri, isimler, Ulusal Kimlik Numaraları, telefon numaraları ve fiziksel adresler de dahil olmak üzere 2,8 milyondan fazla müşteriyi içeriyordu. Az sayıda satırda ayrıca düz metin şifreler ve kullanıcı adları da bulunuyordu. @ dejavu, sızıntıyı nasıl elde ettiğini şu şekilde anlattı: "7 ay önce, hades_hgs adlı bir aktör Turknet'te SQL enjeksiyonu buldu ve büyük bir sızıntı yapmaya hazırlanırken aptallığı yüzünden kendini ele verdi. Yakalanmadan önce, ekranda geri sayım sayacı olan bir onion gizli servis URL'si yayınladı, verilerin yaklaşık 3 gün içinde yayınlanması gerekiyordu, ancak asla yayınlanmadı, muhtemelen polis erişim sağladı ve onion servisini kapattı. Bu onion servisi kapatılmadan önce, TOR soketini bir dizin fuzzer aracına bağlayarak test etmeye başladım, araç hızla onion servisinde "/files/" adlı bir yol olduğunu tespit etti, bu yola girdiğimde veritabanına ait dosyaların bu yolda listelendiğini gördüm ve indirdim, sonra bu veritabanını indirdiğimi unuttum, dün dosyalarımı incelerken veritabanını gördüm ve şimdi buradayız." ve Turknet'i yalan söylemekle suçladı: "Turknet hükümete 280 bin kullanıcının verilerinin çalındığını bildirdi, ancak gerçekte 2,8 milyon kullanıcı vardı ve bunu düzeltmediler." Sistemlerindeki güvenlik açıklarını fark ettim, bu yüzden biraz araştırma yaptım ve başka bir SQL enjeksiyonu güvenlik açığı buldum: Yeni abone olan biri bana adını, soyadını ve doğum tarihini verirse, yeni abonelik bilgilerini ele geçirebilirim." Ele geçirilen veriler: Doğum tarihleri, E-posta adresleri (özel olanlar), IP adresleri, İsimler, Ulusal Kimlik Numaraları, Şifreler, Telefon numaraları, Fiziksel adresler, Kullanıcı adları.
İçerik Spoiler .7z dosyasının MD5 özeti 6E77CB7B6BCB9F67B7D8AA78602647DA'dır . Toplamda 2806537 kayıt bulunmaktadır. Dosya sıkıştırılmamış halde 3,64 GB , sıkıştırılmış halde ise 692,94 MB'tır .
[/alıntı]
Omg This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Contact Administration.
Posts: 2
Threads: 0
Joined: Apr 2026
thank ! That what i looking for This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Contact Administration.
Posts: 9
Threads: 0
Joined: Mar 2025
(Jan 04, 2026, 07:27 PM)dejavu Wrote: Hello BreachForums Community,
Today I have uploaded the Turknet Database for you to download, thanks for reading and enjoy!
https://external-content.duckduckgo.com/...693853.jpg
In March 2025, one of Türkiye's largest internet service providers, Turknet was breached by threat actor named "hades_hgs" who used SQL injection. Later this breach was found by @ dejavu and leaked on BreachForums. The exposed data contained over 2.8 million customers which included dates of birth, email addresses (custom ones), static IP addresses, names, National Identification Numbers, phone numbers and physical addresses. Small number of lines also included plaintext passwords and usernames. @ dejavu described the story of how he got the leak "7 months ago, an actor named hades_hgs found SQL injection on Turknet and was about to make a big leak when he gave himself away thanks to his stupidity. Before he was caught, he published an onion hidden service url with a countdown timer on the screen, the data was supposed to be published in about 3 days, but it was never published, probably the police accessed and disconnected the onion service. Before this onion service was shut down, I started testing by connecting the TOR socket to a directory fuzzer tool, the tool quickly detected that there was a path called "/files/" on the onion service, when I entered this path, I saw that the files belonging to the database were listed in that path and downloaded it, then I forgot that I downloaded this database, yesterday I saw the db while examining my files and now we are here" and accused Turknet of lying "Turknet reported to the goverment that the data of 280k users was stolen, but in reality there were 2.8 million, and they did not fix the vulnerabilities in their systems, so I did some research and found another SQL injection vulnerability, if someone who has just subscribed gives me their name, surname and date of birth, I can throw away the fresh subscription information"
Compromised data: Dates of birth, Email addresses (custom ones), IP addresses, Names, National Identification Numbers, Passwords, Phone numbers, Physical addresses, Usernames.
Contents Spoiler The .7z File's MD5 Hash is 6E77CB7B6BCB9F67B7D8AA78602647DA. In total, there are 2806537 records. The file is 3.64GB uncompressed and 692.94MB compressed.
tyty
Posts: 3
Threads: 0
Joined: Apr 2024
This was a good leak. Many places offer content like this, but this is sufficient. Well done
Posts: 6
Threads: 0
Joined: Nov 2023
Thank u sir, it looks good
Posts: 6
Threads: 0
Joined: Apr 2026
(Jan 17, 2026, 10:34 PM)cotonxa Wrote: great job brother good job mate This forum account is currently banned. Ban Length: Permanent (N/A Remaining) Ban Reason: Contact Administration.
|