According to the announcement published on the Personal Data Protection Board (KVKK) website, the personal data of Tokat Gaziosmanpaşa University students were leaked. Using a vulnerability in the system, cyber attackers can collect information, especially students’ credentials.