Personal Data Authority (KVKK), popular platform for selling fast vehicles in Turkey VavaCars He made an important statement about this. The statement stated that there had been a data breach in VavaCars’ systems. Data breach affecting platform employees and users, 32 thousand 589 people Impressed.

According to the information in KVKK personal data of customers has been seized. The data recorded includes names, telephone numbers, email addresses, IBAN numbers and general information about users’ vehicles, plates and VIN codes are included.

The KVKK statement reads as follows:

In summary, in the data breach notifications submitted to the Board by Vava Cars Turkey Automotive Joint Stock Company, the data controller;

• Your transgression; occurred as a result of capturing and using an internal user’s credentials to access application data,
• Your transgression On 31.10.2023 took place and was discovered the same day,
• Number of people affected by the breach 32,589 is,
• Relevant groups of people affected by the breach include employees, userssubscribers/members, customers and potential customers,
• Categories of personal data affected by the breach;
  • Name, address, telephone number, email address, IBAN, bank details, price, VIN, plate number and customer data provided when purchasing a car, including vehicle information
  • r including name, address, telephone number, email address, appointment date, center name and license plate number.provided for andevu customer data
  • Includes name, email address, telephone number, address, contact name dealer details
  • Including customer name, email address, telephone number customer data
  • Includes name, address, email address, city, manager name warehouse data
  • Starting price, minimum price, buy now price, total cost, vehicle details tender details included

is

• Relevant persons can receive information about the personal data leak from the data controller via email and call center.

information is included.

Although the investigation into this matter continues, the decision of the Dutch Data Protection Authority of 09.11.2023 with number 2023/1927 decided to publish reports of data leaks on the Authority’s website.