According to LOG, citing an announcement from Turkey's Personal Data Protection Authority (KVKK), personal data belonging to some customers of ticketing platform Biletal was put up for sale on an illicit online forum [1]. The company discovered the data breach on August 11, 2025, after receiving an official letter from the Information and Communication Technologies Authority and conducting an internal investigation [1]. The notification estimated that approximately 7,800 customers were affected, with exposed data categories including identity, contact, and customer transaction details [1].
Turkey's Biletal Discloses Customer Data Breach
1 min read
- Disclosed
- Aug 15, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Transportation & logistics
What to do nowOur advice
The notification estimated that approximately 7,800 customers were affected, with exposed data categories including identity, contact, and customer transaction details [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
The notification estimated that approximately 7,800 customers were affected, with exposed data categories including identity, contact, and customer transaction details [1].
Source excerpt: "Kişisel Verileri Koruma Kurumu (KVKK), “Türk Tabipler Birliği” ve “Biletal” için veri ihlal bildirimleri geçti için veri ihlal bildirimleri geçti." [1].
References
Media1
- [1]
“Kişisel Verileri Koruma Kurumu (KVKK), “Türk Tabipler Birliği” ve “Biletal” için veri ihlal bildirimleri geçti için veri ihlal bildirimleri geçti.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.