35 thousand 274 people affected: KVKK fines Twitch 2 million TL due to data breach!

The Personal Data Protection Authority (KVKK) has imposed a 2 million TL administrative fine on the social media platform Twitch due to a data breach.

The KVKK launched an ex officio investigation following allegations that a data breach of approximately 125 GB had occurred on Twitch.

As a result of the investigation, the KVKK determined that the data controller did not show sufficient care while implementing configurations to eliminate problems in the system, that security measures that should have been taken before the violation occurred were only implemented after the data breach, and that there was a failure to identify risks and threats.

It was determined that 35 thousand 274 people residing in Turkey were affected by the breach.

The KVKK decided to impose a total administrative fine of 2 million lira on Twitch, consisting of 1 million 750 thousand lira for "acting contrary to the obligation to take necessary technical and administrative measures to ensure an appropriate level of security to prevent unlawful processing of personal data," and 250 thousand lira for failing to notify the authority about the data breach.