This is unfortunately true. The "MERNIS" leak is freely available, containing some 49M citizens with their ID card numbers, addresses and a lot more.