Dubmash Inc
- Country
- Turkey
- Fine
- 730,000 TRY
- Date
- 2019-07-17
- Sector
- Public Sector
- Articles
- Article 12 and 18 of the DPL
Insufficient technical and organisational measures to ensure information security + Failure to notify the DPA within the necessary timelimit
It has been determined by the KVKK that Dubmash Inc was subject to a data breach affecting 679.269 people in Turkey. Data servers of Dubmash Inc was accessed by unidentified people on Internet and it is detected that personal data of people up to 162 million have been illegally sold. A penalty was issued based on the lack of sufficient technical and organisational measures and failure to notify the DPA and the people affected by the data breach. Authority: Turkish Data Protection Authority (KVKK)