Newsletters
Turkish prosecutors launched an investigation into unauthorized access to Getir and BiTaksi systems after personal data of thousands of users was allegedly stolen and shared on social media and dark web platforms.
Following Turkish media reports of the data breach, the Istanbul Chief Public Prosecutor's Office identified software engineer Ferhat Y., employed at Getir, who allegedly accessed personal information of 2,890 people within just 20 days two years ago.
The data included users' names, surnames, addresses, phone numbers, travel information, and order details, which were subsequently shared on social media and dark web platforms.
Technical examinations reportedly showed that Ferhat Y., 32, conducted intensive data queries using his corporate email address, ferhat.y***@getir.com, between Feb. 23 and March 11, 2023.
Each query extracted more than 2,000 rows of data, creating approximately 2,890 separate data requests.
The obtained information reportedly contains sensitive personal details, including names, surnames, addresses, phone numbers, email addresses, and order and travel information.
According to the indictment, Ferhat Y. sent emails under fake names to Getir and BiTaksi founder Nazim Salur, implying that millions of rows of data could be sold to the media or third parties.
The messages contained veiled threats suggesting the company should make payments in response to the situation.
While Ferhat Y. admitted the email address belonged to him in his defense, he denied performing the operations and claimed he never shared his password with anyone.
However, expert reports, server access logs, and digital materials found on his devices proved the operations were carried out directly through his user account.
The indictment requests Ferhat Y. be sentenced to 5 to 13 years in prison under Turkish Penal Code articles 244 (entering information systems), 136 (illegally obtaining personal data), and 107 (blackmail).
The Istanbul Chief Public Prosecutor's Office Cybercrime Investigation Bureau initiated the investigation following allegations of unauthorized system access and personal data theft affecting numerous Getir and BiTaksi users.
1 min read
2 min read
