OYAK (Army Solidarity Corps) Defense and Security Systems Inc. is the data controller. In summary, in the data breach notification submitted to the Personal Data Protection Board by:

• The breach occurred as a result of a ransomware attack on the data controller systems and was detected on 05.03.2024,
• The personal data categories affected by the breach are identity, communication, location, personnel, legal transaction, customer transaction, physical location security, transaction security, risk management, finance, professional experience, visual and audio records, marketing and other data.
• Special categories of personal data affected by the breach include clothing, health information, criminal convictions and security measures,
• Relevant person groups affected by the violation are employees, users, subscribers/members, customers and potential customers, partners, stakeholders, group companies, contractors-subcontractors and suppliers,
• The number of relevant people affected by the violation has not yet been determined and investigations are continuing,
• Relevant persons can obtain information about the data breach via the data controller's website or by calling 0312 287 56 56.

information is included.

Although the investigation on the issue continues, with the Decision of the Personal Data Protection Board dated 14/03/2024 and numbered 2024/469, it was decided to announce the data breach notification on the website of the Personal Data Protection Board.

15 OYAK group companies were affected by the violation. It is extremely noteworthy that OYAK, which has hundreds of thousands of customers, including TSK personnel, suffered a data breach.

It is announced to the public with respect.