Demirkol Otel İşletmecilik Turizm ve Tic. is the data controller. In summary, in the data breach notification submitted by AŞ to the Personal Data Protection Board;

• The breach occurred on 04.11.2023 with a ransomware attack,
• Personal data categories affected by the breach include identity, communication, location, personnel, legal transactions, customer transactions, transaction security, risk management, finance, professional experience, marketing, visual and audio records and race and ethnic origin information,
• The number of people affected by the violation was declared as 5 and the number of records was declared as 300.000,
• Relevant persons can obtain information regarding the violation via the website https://www.arcadehotelistanbul.com.

information is included.

Although the investigation on the issue continues, with the Decision of the Personal Data Protection Board dated 09.11.2023 and numbered 2023/1932, it was decided to announce the data breach notification on the Authority's website.

Source of New: KVKK Public Announcement (Notification of Data Breach)