Karel İletişim Hizmetleri A.Ş., which is the data controller. In summary, in the data breach notifications submitted to the Personal Data Protection Board by:

• The data controller was exposed to a ransomware attack on 03.02.2024,
• As a result of the breach, several documents containing the database of the accounting software used by the data controller, company/subscriber name and debit/credit balance, and the financial information of the data controller were encrypted and seized by the attacker,
• The groups of people affected by the breach are subscribers/members, customers and potential customers,
• The categories of personal data affected by the breach are identity (name, surname, TR ID number) and contact (address, telephone number and e-mail address),
• The estimated number of relevant people affected by the violation is 1254, and detection efforts are continuing,
• Relevant persons can obtain information about the personal data breach from the data controller via the e-mail address [email protected] and the phone number 0 (800) 666 0 666.

information is included.

Although the investigation on the issue continues, it was decided to announce the data breach notification on the Authority's website with the Decision of the Personal Data Protection Board dated 08/02/2024 and numbered 2024/227.