Clickbus Seyahat Hizmetleri A.Ş.
- Country
- Turkey
- Fine
- 1,000,000 TRY
- Date
- 2019-05-16
- Sector
- Technical Sector
- Articles
- Article 12 of the DPL
Insufficient technical and organisational measures to ensure information security + Failure to notify the DPA within the necessary timelimit
A fine of 1.000.000,00 TL was issued as a result of a data breach affecting 67.519 people in Turkey by Clickbus. A malware has been detected in the server of Clickbus, leaking personal data of people wihch lasted for 2 months. The KVKK has issued a penalty based the lack of technical and organisational measure and the delay of notification to the DPA for nearly 45 days. Authority: Turkish Data Protection Authority (KVKK)
Source: https://www.kvkk.gov.tr/Icerik/5478/2019-141
Reported by: Mehmet Gün