Turkey: KVKK announces Atatürk Üniversitesi data breach
On August 17, 2023, the Personal Data Protection Authority (KVKK) announced a data breach that occurred within Atatürk Üniversitesi. In particular, the KVKK highlighted that Atatürk Üniversitesi, notified them of a data breach, in accordance with Article 12(5) of the Law on Protection of Personal Data No. 6698. Moreover, the KVKK noted that on August 9, 2023, an excessive amount of traffic was detected in the system logs of Atatürk Üniversitesi, where subsequent investigations revealed that unauthorized access was obtained to personal data using the username and password of an administrative staff member.
Furthermore, according to the KVKK it is believed that student and employee information was accessed during this breach. The breached personal data includes Turkish identification numbers, names, surnames, dates of birth, places of birth, family order numbers, addresses, email addresses, and mobile phone numbers. In addition, the KVKK emphasized that approximately 12,000 individuals were estimated to be affected by this breach, and that the affected individuals are primarily composed of both employees and students.
You can read the press release, only available in Turkish, here.