Turkish Citizens Data Breach: 48,090,463 Records With SSNs

HEROIC analysts logged a data breach record under the name Turkish Citizens, dated April 1, 2016. It holds 48,090,463 records with Social Security numbers, first and last names, birthdays and gender. The record lists no email address, so a scan of your email is the closest check available.

Why a Number That Is Hard to Replace Raises the Stakes

A password can be changed the same day it is exposed. An identification number is difficult to replace, and so is a birthday. When both appear beside a full name, the record supplies the core details used to open credit, file forms or pose as another person. It lists no password and no email address, so the concern is identity fraud and impersonation rather than a direct sign-in.

The Five Items in Each Record

• Social Security numbers, which institutions use to identify a person and which can be misused to open credit in someone else's name.
• First names, which help a caller or sender sound familiar.
• Last names, which complete the name used to confirm identity.
• Birthdays, a detail that cannot be reissued and that a form may ask for.
• Gender, a personal detail that rounds out an impersonation attempt.

What Misuse Looks Like Without a Password

Misuse can show up as paperwork instead of a broken login: an application you did not make, a notice about an unfamiliar loan, or a call from someone who knows your birthday. These problems can take time to surface, which is why watching credit reports and unexpected mail matters.

What a Database Record Is Built From

A database record is copied out of one organization's own systems rather than collected from individual devices. Every row follows the same layout, so identification numbers, names and birthdays sit together on one line. Turkish Citizens is the label attached to this record; this post makes no claim about who the people in it are or what the source does.

Check Whether Your Details Are Here

Start here: scan your email to see your information. A scan may not match this record directly, but it covers the other exposures HEROIC holds. Then freeze your credit where that option exists, review your credit reports, and be cautious with calls, texts and emails that use your name or birthday. Look at your personal and work addresses both.