In summary, in the data breach notification submitted to the Personal Data Protection Board by the Public Library of Science (“PLOS”), which is the data controller;

• The data controller is a publishing company that publishes open access journals and research in science, technology, medicine and other scientific literature under an open content license,
• An author in the Infectious Diseases and Clinical Microbiology Department of Ankara City Hospital sent an article to the Public Library of Science (“PLOS”) for publication, 
• In the submitted article, the author intended to present an anonymized version of personal data, but the article file in question was openly published online on the internet without anonymization of the data of the people involved in the research study,
• The violation occurred on 31.01.2024 and was detected on 15.02.2024,
• The individuals affected by the breach were part of a medical research study,
• "name, age, gender" data and special personal data "treatment place, medical information, prescribed medications, medical procedures received" data were affected by the violation,
• The number of people affected by the violation was 893.

information is included.

Although the investigation on the issue continues, it was decided to announce the data breach notification on the Authority's website with the Decision of the Personal Data Protection Board dated 22.02.2024 and numbered 2024/321.

Source of New: KVKK Public Announcement (Notification of Data Breach)