According to the announcement published on the website of the Personal Data Protection Authority (KVKK), there was a data breach at the PTT. Critical information such as mother’s maiden name and volume serial number were seized.
3.2 GB database seized
According to the announcement made by KVKK, a data breach notification was made to the Board by the PTT Savings and Assistance Fund unit. A 3.2 GB database containing personal data of PTT employees such as mother’s maiden name and skin serial number was seized by cyber-attackers. About 38,000 records were leaked.
Cyber-attackers accessed the database of the PTT Accumulation and Assistance Fund via malware. It was claimed that the backup of the database and all the files of the site were seized. It was announced that the violation took place on August 29 and was detected on August 30.
Cyber attack on the national submarine management system MUREN and TUBITAK
The following information was included in the data breach notification:
- Unauthorized access to the system where members’ information is provided through malicious software,
- It is claimed that personal data of PTT employees such as mother’s maiden name, skin serial number, 3.2 gb database backup and all files of the site were seized by unauthorized persons,
- The violation occurred between 29.08.2022 and 30.08.2022 and it was detected on 30.08.2022,
- The personal data affected by the violation is the information about identity and membership transactions,
- Approximately 38,000 records were affected by the breach,
- It was stated that the studies on the violation are continuing.