Last night e-Government Gateway allegedly hacked. Cyber security experts shared their analysis on whether the e-Government Gateway was hacked on social media.
The Mernis leak, which first appeared in 2015, caused the personal information of many citizens to spread on the internet. The number of leaked personal data has increased due to large companies hacked recently.
e-Government Gateway made an official statement about the hacking allegations!
e-Government Gateway made an official statement on the subject after the posts about the hacking of e-Government!
Has the e-Government Gate been hacked? State agencies made a statement.
According to the information shared by the experts, there is no definitive proof that the servers of the e-Government door have been infiltrated yet. Official institutions announced that all institutions, especially the e-Government Gateway, regularly perform penetration tests. In addition, it was stated that data such as identity card image, biometrics and family information were not included in the e-Government Gateway.
Experts sharing on social media images of identity cards announced it was fake. From the data leak of 2015, which was put up for sale, and Pishing It is presumed that the information obtained through the attacks.
Another issue shared on the subject is about the API (Application Programming Interface) developed by some official institutions. The API allows software to exchange data without the need for a common database. Authorization errors made in API systems, which are also used in government institutions, can result in data leakage.
How was the personal data of well-known people leaked?
Application security experts with TC ID number announced that personal data was leaked from API systems of some government agencies. Weaknesses in authorization cause hackers to access information such as current address, graduation and salary details of citizens of the Republic of Turkey. It is estimated that the leaked personal information of well-known people has emerged due to API systems and old leaks with authorization problems.
What do you think about this subject? You can share your ideas in the comments section and on the SDN Forum.