THE Turkish Data Protection Authority (KVKK) has completed its investigation into a data breach at Baydöner, a well-known restaurant chain, which resulted in the compromise of personal information from 505,337 customers. The investigation revealed that there were no mechanisms in place to detect unusual system activity, leading to Baydöner being fined 1 million TL for failing to meet data security and notification obligations.
Cybercriminals accessed a company employee's credentials to infiltrate Baydöner's systems, stealing personal data, and later informed a senior executive that they possessed the data. Following this incident, Baydöner reported the breach to KVKK.