Turkey national ID breach (2016)
A breach exposed records of millions of Turkish citizens, including national ID numbers, addresses, and other personal data. The data was reportedly offered for sale online.
The Turkish government downplayed the breach while the data circulated online.
It became a reference point for the scale of damage a national identity database breach can cause.
Like Denmark's CPR, Turkey's national ID database held permanent, hard-to-revoke identity data that became a high-value target for fraud.
