What happened?
Hepsiburada filed a data breach notification with KVKK, Turkey's personal data protection authority. According to the notification, cyberattackers accessed customers' personal data.
Which data is at risk?
The attackers reached information including customers' order history and address details. The leak is therefore not limited to account credentials; shopping habits and delivery addresses are also affected.
Why it matters
Order history and address data strengthen attackers' hand in phishing and fraud attempts, since such details can be used to craft convincing, personalized fake messages.
What users should do
Users should be cautious with emails, SMS messages and calls claiming to be from Hepsiburada, and should not share passwords or verification codes. Changing passwords reused on other sites and enabling two-factor authentication is recommended.
