The Personal Data Protection Authority (KVKK) has announced to the public a data breach notification made by D-Market Elektronik Hizmetler ve Ticaret AŞ, the operator of the Hepsiburada platform. According to the notification, unauthorized access was gained by cyber attackers to certain records held in the systems of a data processor that provides chat infrastructure services to the company.
It was stated that the breach affected chat records from 2022. In the KVKK announcement, it was disclosed that the number of individuals affected by the incident is 9,882.
WHICH DATA WAS AFFECTED?
According to the announcement, the categories of personal data affected by the breach include identity, contact, and customer transaction information. The affected data covers names and surnames, mobile phone numbers, email addresses, addresses, order numbers, shipment numbers, request and complaint information, and records related to purchased or canceled products.
It was reported that not only customers but also employees, potential customers, supplier employees, business partners, and sellers may have been affected by the breach.
The KVKK announced that the investigation into the data breach is ongoing. The notification published by the authority did not include information regarding the outcome of the investigation or any potential sanctions against the company.
It was stated that those who wish to obtain information on the subject can use Hepsiburada's communication channels regarding the protection of personal data. Users can reach the company via the email address [email protected] or the call center at 0850 252 40 00.
It is important for users who believe their personal information may have been affected to check their account activity, be cautious against suspicious links, and take precautions against fraud attempts that could be made using their shopping information.
News Source: 12punto
