BtcTurk, the domestic crypto currency trading platform, stated that in 2018, an unidentified hacker group published some personal data in BtcTurk systems on an illegal data sharing site.

Regarding the leak in BtcTurk (Eliptik Yazılım ve Ticaret A.Ş.), a data breach notification was published on the website of the KVKK.

As a result of the examination and audit, it was evaluated that one of the data sets taken out of the system before July 2018 was the draft version (the first version taken from the database). 

According to the information obtained from the KVKK website, 516,954 people were affected by the violation.  

Kullanıcıların;  

• Identity information (name-surname, date of birth, TR Identity Number and User numbers / ID),
• Contact data (e-mail address, mobile phone number, address) for the period before the event date, registered in BtcTurk systems,
• Transaction security data in BtcTurk (users' IP address of the period before the event date, the last login date to BtcTurk accounts before the event date,

Among the personal data leaked, the login passwords belonging to the period before the event date irreversibly masked with the PBKDF2 algorithm with the current technological possibilities.

It was stated that those who want to get information can receive information from the e-mail address of "[email protected]" or by a request to the address "Nispetiye Caddesi, Akmerkez E-Blok Kat: 9 Beşiktaş / Istanbul".

Every organization that is targeted by cyber threat actors, that is, every organization that steps into digitalization today, must be prepared for an attack that may occur and have an incident response plan. 

As CyberArts information security team, you can access our post regarding the incident response plan, which we have previously published, from the link below;  

https://cyberartspro.com/20210501-bir-olay-mudahale-planiniz-var-mi/