18 December 2019

Under the Article 12 of the Law No. 6698 Law on the Protection of Personal Data, titled “Obligations relating to data security”; Küçükçekmece Municipality sent a notification to the Turkish Data Protection Board (“the Board”) on 13.12.2019. With this notification, Küçükçekmece Municipality has informed the Board as a data controller on these subjects;

  • The breach occurred at the contractor company, which Küçükçekmece Municipality having a service of mass text messaging, by capturing the user name and password through the web interface while sending text messages to everyone registered on the service. 
  • The breach took place at 05:42 a.m. on 12.12.2019 and determined at 6:30 a.m. on the same day.
  • The estimated number of people affected by the breach is 285,000, and they were citizens of the district.

Although the investigation on the subject is still ongoing, with the decision of the Board dated 17.12.2019 and numbered 2019/384 it decided to announce the notification of the data breach on the website of the Board.

You can find the text of the public announcement (in Turkish) here.

Should you have any queries and/or remarks, please do not hesitate to contact us. 

Kind regards,

Zumbul Attorneys-at-Law