Turkish authorities arrested four suspects in a coordinated cyber espionage operation targeting personal data and public institutions, security sources said Friday.
The operation was carried out simultaneously in Istanbul and Karabuk under the coordination of Türkiye’s National Intelligence Organization (MIT), with support from the Presidency of Cybersecurity, the Gendarmerie General Command and the Financial Crimes Investigation Board (MASAK).
According to security sources, the suspects were part of a criminal network that gained unauthorized access to sensitive data by targeting citizens’ personal information and systems belonging to public institutions.
As part of an investigation led by the Ankara Chief Public Prosecutor’s Office, four suspects were taken into custody during simultaneous operations in Istanbul and Karabuk.
During the raids, authorities seized data storage devices and technical equipment used for internal communication within the network. Forensic IT examinations were conducted on the materials, and investigators overcame password protections and other access barriers.
After completing procedures at the gendarmerie, the suspects were referred to the courthouse and later arrested by the court.
Authorities said eight websites were blocked after it was determined they hosted illegally obtained data and allowed unrestricted access, including by terrorist organizations.
MIT’s examination found that the illegal transfer of data had evolved into a systematic cyber espionage activity.
MASAK investigations revealed that illegal income generated through the operation was laundered using crypto-asset transfers, with payments routed through foreign-based platforms.
Financial flows were concealed through multi-stage transfer methods, authorities said, adding that the transactions were documented as part of the investigation.
Officials also said the Presidency of Cybersecurity provided technical support to MIT during operations targeting cyber espionage activities and threats against national cybersecurity.