Cathay Pasific Airway Limited
- Country
- Turkey
- Fine
- 550,000 TRY
- Date
- 2019-05-16
- Sector
- Technical Sector
- Articles
- Article 12 of the DPL
Insufficient technical and organisational measures to ensure information security + Failure to notify the DPA within the necessary timelimit
A fine of 550.000,00 TL was issued as a result of a data breach possibly affecting 1286 people in Turkey by Cathay Pasific. The breach was induced by a cyber attack and lasted for 2 months leaking important personal data such as Passport Numbers of Turkish citizens. The KVKK has issued a penalty based on the lack of technical and organisational measure and the delay of notification to the DPA for nearly 5 months. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5480/2019-144
Reported by: Mehmet Gün