Arçelik announced that it had a data leak with its data breach notification to KVKK. Information about the data leak was included in the announcement published on the website of KVKK.Data on the Arçelik BizBize mobile application and website, used by Arçelik for sales target campaigns of dealers and authorized services, were leaked. It was determined that Arçelik BizBize’s admin panel was accessed and personal data was seized by a cyber attacker in Germany. While the information of approximately 30 thousand people, consisting of authorized service and dealer employees, was obtained, there was no leakage of customer data.
What information was captured?
Identity (name, surname, TCKN, title, date of birth, gender), communication (e-mail address, GSM number), transaction security (LDAP (Lightweight directory access protocol) code (data retention and access verification) of authorized services and employees in the cyber attack is the code used for), user password, registration and update date, last login date, account activity status, device model, version and operating system information, application version information, notification permission status), point earning and spending information of dealers and authorized service employees, Although there is no specialization, training, date of employment, personal information of the person concerned, the code, name and address of the dealer and store where he was working were seized.
It was stated that persons exposed to data leakage can get detailed information by filling out a form at https://privacyportal-eu.onetrust.com/webform/1ee6a6ce-9b09-49bd-b9e4-a3544706c63e/6361bf5f-8fd5-4af5-8c3a-6cd46cddca1b.
44690
