Personal Data Protection Authority KVKK, a new data breach notification today made. This time in the center Villacim Real Estate company is located.
Villacım Real Estate Tourism Construction Industry and Trade Limited Company KVKK, the Personal Data Protection Authority, passed the following official announcement today: “As it is known, paragraph (5) of Article 12 of the Law on the Protection of Personal Data No. 6698, titled “Obligations regarding data security” states, “In case the processed personal data is obtained by others illegally, the data controller shall notify the relevant person and the Board as soon as possible. If necessary, the Board may announce this situation on its own website or by any other method it deems appropriate.” its ruling.
In summary, in the data breach notifications submitted to the Board by Villacım Emlak Turizm İnşaat Sanayi ve Ticaret Limited Şirketi, which has the title of data controller;
- By performing a Cross Site Scripting attack on the website of the data controller (“https://www.villacim.com.tr/”) customer’s phone number information is captured and a campaign message is sent to the customers by the attackers, then from the data controller. ransom requested,
- The violation took place on 12.04.2022 and was detected on the same day,
- It has been stated that the name, surname, TR ID number, telephone and address information of the relevant persons are processed by the data controller, and it is stated that it is not clear what data the attackers have in their hands. not detectable,
- Estimation of the number of persons affected by the breach is 35,956,
- The contact group affected by the breach is customers,
- Information about the data breach of the relevant persons by calling +90 850 532 6802 or [email protected] information that can be obtained via e-mail address is given.
Although the investigation on the subject continues, with the Decision of the Personal Data Protection Board dated 21.04.2022 and numbered 2022/404, it was decided to announce the data breach notification on the website of the Authority. It is announced to the public with respect.”
YOU MAY BE INTERESTED
Personal Data Protection Authority, KVKK, constantly makes such notifications on its official website. Directly to all data breach notifications made so far from here you can reach