KVKK: Tokat Gaziosmanpaşa University was Hacked

Personal Data Protection Authority announced that Tokat Gaziosmanpaşa University was hacked. In the attack originating from abroad, the identity information of more than 700 students was seized.

Personal Data Protection Authority (KVKK), made a rare statement. In the statement made by KVKK, it was stated that there was a data breach in 3 institutions. These institutions; Tokat Gaziosmanpaşa University, Havaist Transportation Industry and Trade Inc. and Johnson Controls Air Conditioning and Service Soğutma San. and Tic. Ltd. Ltd. was. The most important of these was the data breach at Tokat Gaziosmanpaşa University.

According to the statement made by KVKK, Tokat Gaziosmanpaşa University, September 11, 2023 It was hacked on. University officials detected this situation on October 3. The personal data of students studying at Reşadiye Vocational School was leaked as a result of the attack. KVKK, More than 700 students He explained that he was affected by this situation and that the identity and contact information of the students and visual and audio recording data were leaked.

The statement made by KVKK is as follows:

As it is known, paragraph (5) of Article 12 titled “Obligations regarding data security” of the Personal Data Protection Law No. 6698 states that “In case the processed personal data is obtained by others through illegal means, the data controller shall notify this situation to the relevant person and the Board as soon as possible. If necessary, the Board may announce this situation on its own website or through another method it deems appropriate.” commands its judgment.

In summary, in the personal data breach notification submitted to the Board by Tokat Gaziosmanpaşa University, which is the data controller;

Within the scope of threat intelligence activities carried out by the National Cyber ​​Incident Response Center (USOM), the data controller was notified on 03.10.2023 that student information, which was considered to belong to Reşadiye Vocational School, was sold or attempted to be sold by attackers on various forum sites on the internet,

During the investigations, it was determined that the data controller’s systems were logged in as authorized users from foreign IP addresses,

The violation occurred on 11.09.2023 and was detected on 03.10.2023,

The relevant group of persons affected by the violation is students,

Data affected by the breach; identity, communication, visual and audio recording data,

The estimated number of people affected by the breach is 741,

Data controller’s duty regarding the data breach of the relevant persons [email protected], [email protected] They can provide information via their e-mail addresses and phone numbers 0356 252 16 16/4250-4255-4257.

information is included.

KVKK’s statement about Tokat Gaziosmanpaşa University from here, Havaist Transportation Industry and Trade Inc. his statement about from here, Johnson Controls Air Conditioning and Service Soğutma San. and Tic. Ltd. Ltd. in his statement about from here accessible.

Source :
https://www.kvkk.gov.tr/Icerik/7722/Kamuoyu-Duyurusu-Veri-Ihlali-Bildirimi-Tokat-Gaziosmanpasa-Universitesi-


source site-34