The biggest data theft in history: Data is protected by strong passwords and multi-factor authentication

Ezgi SİVRİTEPE - 12punto.com.tr

The largest data breach in history has been revealed. It was announced that 26 billion records were leaked in the theft, which has been described as the 'mother of all breaches.' It is stated that data belonging to the Turkish government is also among the stolen information.

Cybersecurity and IT experts who evaluated the issue for 12punto drew attention to digital security.

12punto columnist Prof. Dr. Cem Sefa Sütcü emphasized that a collective awareness is needed to ensure security in the digital age. Sütcü also stated that digital security will become even more critical in the future.

“DIGITAL SECURITY WILL BECOME EVEN MORE DIFFICULT”

Stating that we do not know which data we should share, Sütcü said, “I evaluate media literacy through the lens of awareness and consciousness levels. There is not enough education provided on this subject. Digital literacy education must be provided starting from primary school because this is the only way they can be aware of the digital world.”

Sütcü noted that cartoons for children and TV series, films, and advertisements for adults could be effective for raising awareness. Sütcü used the expression, “A collective consciousness is needed, a collective action is needed because digital security will become even more difficult in the future.”

Stating that for some people, email accounts may not seem important, Sütcü said, “Your account being stolen may not be important to you, but it is possible that your data could be used to reach your relatives and ‘deceive’ them. One should not think, ‘What will they do with my account?’ Because social media accounts are now even written on resumes and these accounts are checked during recruitment. Increasing digital literacy awareness is very important, but this is not something that can happen alone.”

“THIEVES ARE ALWAYS ONE STEP AHEAD”

Stating that it is not possible to protect personal data while using phones and computers and connecting to the internet, Sütcü said, “It is not possible to protect personal data one hundred percent, even if you are a computer engineer, because thieves are always one step ahead. But, even if it is not possible to protect it one hundred percent, it can be minimized through awareness-raising.”

ALLEGATIONS THAT GOVERNMENT DATA WAS LEAKED

Cybersecurity Expert Ersin Çahmutoğlu emphasized that strong passwords and multi-factor authentication measures should be taken to protect digital data. Stating that the stolen data consists of personal information, Çahmutoğlu denied the allegations that the Turkish government's data had been leaked.

Çahmutoğlu said the following:

"Which application we use and for what purpose is an important issue. We should not give our personal information to every application. Social media accounts should also contain as limited information as possible. Apart from this, strong passwords and multi-factor authentication measures should be taken.

The first thing we should do is look at where the data was stolen from. Depending on the situation, we may need to change or update our information such as passwords, email accounts, banking login credentials, and social media accounts.

The most common threat in this regard is phishing attacks. Most credentials are obtained through these attacks. On the other hand, the security of social media accounts is also important. If there are weak passwords and other missing security measures here, our data will be in danger as a result of a cyberattack or hacking.”

Çahmutoğlu also emphasized the importance of digital literacy with these words:

“Digital literacy is absolutely essential. It should be included in the education curriculum at the middle school level. Later on, step-by-step social media usage and basic cybersecurity training are also essential. Cybercriminals mostly harm people who are unaware of these issues. Therefore, the subject is very serious.”

A SOLUTION TO PROTECT PERSONAL DATA: NICKNAMES

Cybersecurity expert Burak Bozkurtlar drew attention to the use of 'nicknames' to protect personal data.

He stated that in the event of personal data theft, one should apply to the Office of the Chief Public Prosecutor.

Emphasizing the importance of using 'nicknames' on social media and online shopping sites, excluding e-government systems, Bozkurtlar said, “We should use private email addresses for social media and shopping sites. We need to use our personal data in e-government and internet banking systems, but we must also use two-factor authentication there. If we use a different nickname for every platform, it becomes much easier to understand where our data was stolen from. Furthermore, it is quite important to take out ‘cybersecurity insurance’ individually. Because, for example, if your personal data is exposed in a government institution, you can initiate a legal process and receive compensation.”

IF YOUR PERSONAL DATA HAS BEEN STOLEN…

Bozkurtlar stated that if you know where your personal data was stolen from, you can apply to the Office of the Chief Public Prosecutor, file a complaint through the website of the Personal Data Protection Authority (KVKK), or file a complaint via UYAP Citizen or CİMER.

Bozkurt also added, "Data is being seized in internet banking, or YSK data, or İSKİ data. The state should regulate this; there is no concrete work on it. When you definitively identify it, you can file a complaint against the institution from which your personal data was taken."