TurkNet Massive Data Breach: 244,000 Users' Information Stolen

TurkNet, one of Türkiye’s leading internet service providers, has come to the fore with a major data breach. According to the notification made to the Personal Data Protection Board (KVKK), 244,396 users’ information was leaked as a result of a SQL Injection attack on one of the company’s systems.
 
How did the data breach occur?
 
TurkNet's statement to the Board stated that the attack started on February 26, 2025, but was noticed as a result of a complaint filed with the Information Technologies and Communication Authority (BTK) on March 11, 2025.
 
Authorities reported that the attack was carried out through SQL Injection into one of the company's services and that the attackers accessed customer information in the database.
 
What data was leaked?
 
According to initial investigations, personal data affected by the attack was listed as follows:
 
    Name, surname
 
    Phone number
 
    Subscription number
 
    Turkish ID number
 
    TurkNet subscription circuit information
 
    Address
 
    Static IP information
 
TurkNet announced that detailed investigations are ongoing to clarify the extent of the incident.
 
Official statement from KVKK
 
The Personal Data Protection Board (KVKK), with its decision numbered 2025/578 dated 20 March 2025, decided to publish the announcement regarding the data breach on the institution's website.
 
TurkNet announced that users who want to get information about the violation can call the fast action lines at 0850 288 80 80 and 0850 344 28 18 or submit a written application to its head office in Istanbul.
What is SQL Injection?
 
SQL Injection is a vulnerability that allows cyber attackers to gain unauthorized access to a website’s database. These attacks are typically carried out by injecting malicious SQL commands into data entry points such as user login forms or search bars. With SQL Injection, attackers can steal, modify, or delete data on the system. It is critical for web developers to take security measures to close such vulnerabilities.
 
 
Source: Beykozun Sesi
 
 
Source: Pursaklar News