Turkey: KVKK announces Rezzan Günday data breach
The Turkish data protection authority ('KVKK') announced, on 18 August 2020, a data breach suffered by Rezzan Günday (Şimşek Pharmacy). In particular, the KVKK highlighted that the breach resulted from the misconduct of a former employee and involved obtaining the identification numbers of patients and transferring them to another pharmacy without their knowledge in order to provide the supply of drugs from other pharmacies. In addition, the KVKK noted that the violation had occurred since October 2019 and that personal data affected by the breach included ID numbers, telephone numbers, and special category health data.
You can read the press release, only available in Turkish, here.