DATA BREACH NOTIFICATION FROM N11.COM

27 December 2019

Under Article 12 of the Law on the Protection of the Personal Data numbered 6698[1], Doğuş Planet Electronic Trade and Information Services Inc. (n11.com) sent a notification to the Turkish Data Protection Board (“the Board”) on 20.12.2019. With this notification, n.11.com has informed the Board as a data controller on these subjects;

  • The e-mail addresses of 832 n11.com members were seized on the internet by third parties who were not affiliated with the Company,
  • The third parties used these e-mail addresses to logged into the members' n.11.com accounts via password test,
  • The personal data affected by the breach were identity, contact and customer transaction information,
  • The breach took place on 17.12.2019, detected on the same day, and the investigations on the subject were continuing,
  • Data subjects could get information about the data breach from the e-mail address kisiselverilerim@n11.com 

Although the investigation on the subject is still ongoing, with the decision of the Board dated 26.12.2019 and numbered 2019/401, it was decided that to announce the notification of the data breach on the website of the Board.

You can find the text of the public announcement (in Turkish) here.

Should you have any queries and/or remarks, please do not hesitate to contact us.

Kind regards,

Zumbul Attorneys-at-Law

info@zumbul.av.tr


[1] In case the processed data are collected by other parties through unlawful methods, the controller shall notify the data subject and the Board within the shortest time. Where necessary, the Board may announce such breach at its official website or through other methods it deems appropriate.