Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Turkey: KVKK reports a data breach at Zello affecting 494,746 individuals' personal data
On November 19, 2024, the Personal Data Protection Authority (KVKK) announced a data breach, in Decision no. 2024/1949, involving Zello Inc.. The KVKK highlighted that Zello notified them of the breach, as required by Article 12(5) of the Law on Protection of Personal Data No. 6698.
The KVKK noted that the breach occurred via a ransomware attack, resulting from a threat actor gaining access to personal data held by the data controller. The breach was detected when the threat actor contacted the data controller. The number of individuals affected by the breach was 494,746, comprising users, subscribers/members, customers, and potential customers.
The personal data affected by the breach included the username, hashed password (encrypted with MD5 algorithm), email address, and phone number provided by users when creating a Zello account.
You can read the press release, only available in Turkish, here.