EDRi-gram 14.08, 20 April 2016 The biggest data breach in Turkish history

Started by rmstock, April 20, 2016, 10:01:02 PM

Previous topic - Next topic

rmstock


  "======================================================================
   
   EDRi-gram
   
   fortnightly newsletter about digital civil rights in Europe
   
   EDRi-gram 14.08, 20 April 2016
   Read online: https://edri.org/edri-gram/14-08/
   =======================================================================
   Contents
   =======================================================================
   
   1. Member Spotlight: Access Now
   2. Countering terrorism, a.k.a. the biggest human rights threat of 2016
   3. New data protection law in Turkey
   4. Huge protest against corruption & surveillance in Macedonia
   5. The biggest data breach in Turkish history
   6. The lobby-tomy 5: legal help or political choices?
   7. Trilogues: the system that undermines EU democracy and transparency
   8. DFRI thrown out of conference on surveillance cameras
   9. Recommended Action
   10. Recommended Reading
   11. Agenda
   12. About
   
   
   =======================================================================
   [ ... ]
   =======================================================================
   3. New data protection law in Turkey
   =======================================================================
   
   Turkish Parliament enacted the Data Protection Law on 24 March 2016 and
   it entered into force on 7 April. There had been several attempts for
   enacting the Law over the course of more than 10 years, but all of the
   bills were later withdrawn by the AKP - Justice and Development Party
   (the ruling party since 2002) governments.
   
   .................................................................
   Support our work - make a recurrent donation!
   https://edri.org/supporters/
   .................................................................
   
   The AKP was quite motivated to enact the law because:
   
   - Due to the nonexistence of Data Protection Law, Turkey was regarded as
   an "unsafe country" in terms of data protection and this resulted in
   certain difficulties for collaboration of Turkish security agencies with
   its counterparts abroad.
   
   - Many Turkish companies could not operate in Europe and other places
   for the same reason.
   
   - The government has the plan of establishing a "World Finance Center"
   in Istanbul, but that would be impossible without a proper DP Law.
   
   - Turkey is officially a candidate country for membership to the
   European Union which enforces member and candidate countries to adopt a
   DP Law.
   
   The hesitation of the government was due to the concern that the
   previous versions of the law would not be in conformity with the
   contemporary approach and thus would not be adequate for realizing the
   objectives outlined above. In the earlier versions of the bill, the Data
   Protection Board was to be appointed by the government or the President
   which draws suspicion to its autonomy. In the last version, four members
   of the Board were to be appointed by the government and three members by
   the President. This has been changed last minute and the enacted law
   envisages that two members are to be appointed by the President, two by
   the government and five to be elected by the Parliament.
   
   Another hesitation in the previous versions stemmed from the fact that
   several security agencies such as police and secret service were given
   exemption for collecting and processing personal data. Although the new
   law does not explicitly mention these organisations, it has several
   exemptions which will pave the way for these organisations legally to
   collect and process data.
   
   CHP - People's Republican Party, the largest opposition party, declared
   that it will apply to the Constitutional Court for the annuling of the law.
   
   Turkey��� data protection draft law open to abuse: Expert
   http://www.hurriyetdailynews.com/turkeys-data-protection-draft-law-open-to-abuse-expert-.aspx?pageID=238&nID=95796&NewsCatID=341
   
   Turkey passes long-awaited data protection law (07.04.2016)
   https://www.yahoo.com/tech/turkey-passes-long-awaited-data-protection-law-171736298.html
   
   Turkey��� New Data Protection Law (15.04.2016)
   http://www.jdsupra.com/legalnews/turkey-s-new-data-protection-law-43057/
   
   Turkey Completes Final Step in Approving Data Protection Legislation
   (07.04.2016)
   http://www.morogluarseven.com/news/turkey-completes-final-step-approving-data-protection-legislation
   
   
   =======================================================================
   4. Huge protest against corruption & surveillance in Macedonia
   =======================================================================
   [ ... ]
   =======================================================================
   5. The biggest data breach in Turkish history
   =======================================================================
   
   About 50 million personal records of Turkish citizens have been made
   publicly available in a searchable database on the internet. Ironically,
   although the site that holds the database is open to the entire world,
   it is one of the 110,000 sites blocked by Turkish government and can
   only be accessed from Turkey via a virtual private network (VPN). The
   database contains personal information such as names, citizenship
   numbers, parent names and addresses of 49,611,709 citizens. This huge
   number involved makes the breach the most serious in Turkish history. By
   comparison: the Office of Personnel Management leak in April 2015
   involved the personal records of 22 million public servants in the US.
   
   .................................................................
   Support our work - make a recurrent donation!
   https://edri.org/supporters/
   .................................................................
   
   Contrary to the reports in the international media, the leak does not
   seem to be recent, but what is new is, that the data is now available on
   the net. In Turkey, citizenship data has been available on the black
   market for years. It was mainly sold to solicitors and cargo companies
   which need accurate addresses of individuals. Several people were taken
   into custody for obtaining the data on 27 July 2010 and twelve of them
   were later sentenced.
   
   The version available on the internet seems to be related to the 2009
   elections, as it contains data on citizens that were over 18 years of
   age at that time. The government was quick to blame the largest
   opposition party (CHP) and its arch-rival Fethullah Gülen, a US-based
   cleric for leaking the database at the same time. It is currently
   considering not to give electorate data to the parties in future
   elections. The opposition party responded that this was nonsense and it
   was only one of the 30 parties that received the database. According to
   CHP, this accusation is an indication of the intention of further fraud
   by the ruling party AKP by keeping information from them.
   
   As a potential ticking bomb, all health records such as doctor visits,
   treatments, health tests and medicine prescribed for all citizens are
   also kept in a central database in Turkey. This is permitted by the new
   Data Protection Law and any similar breach of that database will have
   even more serious consequences in future.
   
   Personal data of 50 million Turkish citizens, incl Erdogan��� reportedly
   leaked online (04.04.2016)
   https://www.rt.com/news/338409-personal-data-turkey-leaked/
   
   Personal details of 50 million Turkish citizens leaked online, hackers
   claim (04.04.2016)
   http://www.telegraph.co.uk/news/2016/04/04/personal-details-of-50-million-turkish-citizens-leaked-online-ha/
   
   Hack Brief: Turkey Breach Spills Info on More Than Half Its Citizens
   (05.04.2016)
   http://www.wired.com/2016/04/hack-brief-turkey-breach-spills-info-half-citizens/
   
   Correction: Turkey-Data Leak story (06.04.2016)
   http://bigstory.ap.org/article/0d88b2c4311a464587a485ad56ac986e/data-nearly-50-million-turks-allegedly-leaked-online
   
   Turkey launches inquiry into leak of 50 million citizens' data (04.06.2016)
   http://www.reuters.com/article/us-turkey-cyber-idUSKCN0X31ZK
   
   
   =======================================================================
   6. The lobby-tomy 5: legal help or political choices?
   =======================================================================
   [ ... ] "


``I hope that the fair, and, I may say certain prospects of success will not induce us to relax.''
-- Lieutenant General George Washington, commander-in-chief to
   Major General Israel Putnam,
   Head-Quarters, Valley Forge, 5 May, 1778

yankeedoodle


rmstock

Quote from: yankeedoodle on April 20, 2016, 11:19:11 PM
Found this link at this website:    http://worldcongress.hedonist-international.org/?lang=en

World hedonist congress.  Wow.
At least they are not promoting some latest NATO Weapons and Mercenary Summit/Congress.
The same with Trump  as i see it. This guy made his fortune with Building(s), Real Estate,
Horeca and Hotel/Casino .

``I hope that the fair, and, I may say certain prospects of success will not induce us to relax.''
-- Lieutenant General George Washington, commander-in-chief to
   Major General Israel Putnam,
   Head-Quarters, Valley Forge, 5 May, 1778

yankeedoodle

Quote from: rmstock on April 20, 2016, 11:52:42 PM

At least they are not promoting some latest NATO Weapons and Mercenary Summit/Congress.
The same with Trump  as i see it. This guy made his fortune with Building(s), Real Estate,
Horeca and Hotel/Casino .

Yes, of course.  Just surprised to see that hedonists have an international congress that holds meetings.  Congresses and meetings seem like such un-hedonistic experiences, as in "Fuck that, let's go have some fun."