Aydo Yazılım: MİT-led operation nets five suspects over trade union data breach

MİT-Led Operation Uncovers Trade Union Data Breach in Turkey

A coordinated operation by Turkey’s National Intelligence Organization (MİT), the Cybersecurity Directorate, and the Gendarmerie General Command has resulted in the arrest of five suspects linked to a data breach at Aydo Yazılım, an Ankara-based software firm serving trade unions. The detentions followed simultaneous raids on homes and workplaces in the capital.

Investigators identified a special query interface in the company’s union software, allegedly allowing unauthorized access to personal data of individuals not affiliated with unions. The system reportedly enabled searches using Turkish national ID numbers, retrieving sensitive details such as identity and population registration records. Background databases contained even broader personal information, including records of minors under 18.

Server logs revealed the abbreviation "NVİ" associated with Turkey’s Directorate General of Population and Citizenship Affairs though authorities confirmed the data was not directly sourced from the agency’s systems. The breach appears tied to the software’s use in completing membership records for unions.

Aydo Yazılım also operated under the name "Clock&Wise", providing consultancy on compliance with Turkey’s Personal Data Protection Law (KVKK). Authorities are now assessing which unions used the system, the scope of its deployment, and the purposes behind the data processing. The investigation may expand pending analysis of seized digital evidence.

Source: https://www.hurriyetdailynews.com/mit-led-operation-nets-five-suspects-over-trade-union-data-breach-226935

Aydo Yazılım TPRM report: https://www.rankiteo.com/company/aydoyazilim

"id": "ayd1789554739",
"linkid": "aydoyazilim",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Individuals not affiliated with '
                                              'unions (scope unknown)',
                        'industry': 'Software Development, Consultancy '
                                    '(Compliance with KVKK)',
                        'location': 'Ankara, Turkey',
                        'name': 'Aydo Yazılım',
                        'type': 'Software Firm'}],
 'attack_vector': 'Unauthorized Access via Software Interface',
 'data_breach': {'personally_identifiable_information': 'Yes (Turkish national '
                                                        'ID numbers, identity '
                                                        'records)',
                 'sensitivity_of_data': 'High (personally identifiable '
                                        'information, including national ID '
                                        'numbers)',
                 'type_of_data_compromised': ['Identity records',
                                              'Population registration details',
                                              'Records of minors under 18']},
 'description': 'A coordinated operation by Turkey’s National Intelligence '
                'Organization (MİT), the Cybersecurity Directorate, and the '
                'Gendarmerie General Command resulted in the arrest of five '
                'suspects linked to a data breach at Aydo Yazılım, an '
                'Ankara-based software firm serving trade unions. The breach '
                'involved unauthorized access to personal data of individuals '
                'not affiliated with unions through a special query interface '
                'in the company’s union software.',
 'impact': {'brand_reputation_impact': 'Potential reputational damage to Aydo '
                                       'Yazılım and affiliated trade unions',
            'data_compromised': 'Personal data, including identity records, '
                                'population registration details, and records '
                                'of minors under 18',
            'identity_theft_risk': 'High (exposure of Turkish national ID '
                                   'numbers and personal records)',
            'legal_liabilities': 'Potential violations of Turkey’s Personal '
                                 'Data Protection Law (KVKK)',
            'systems_affected': 'Aydo Yazılım’s union software system'},
 'investigation_status': 'Ongoing (pending analysis of seized digital '
                         'evidence)',
 'post_incident_analysis': {'root_causes': 'Unauthorized access via a special '
                                           'query interface in union software'},
 'references': [{'source': 'MİT-Led Operation Report'}],
 'regulatory_compliance': {'regulations_violated': ['Turkey’s Personal Data '
                                                    'Protection Law (KVKK)']},
 'response': {'containment_measures': 'Arrests of five suspects, raids on '
                                      'homes and workplaces',
              'law_enforcement_notified': 'Yes (MİT, Cybersecurity '
                                          'Directorate, Gendarmerie General '
                                          'Command)'},
 'threat_actor': 'Five arrested suspects (affiliation unknown)',
 'title': 'MİT-Led Operation Uncovers Trade Union Data Breach in Turkey',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Special query interface allowing unauthorized '
                            'searches using Turkish national ID numbers'}