Back and Bond Apparel Data Breach
In September 2026, Turkish menswear retailer Back and Bond Hazır Giyim Anonim Şirketi (backandbond.com) suffered a data breach after threat actors exploited a third-party software library vulnerability on a server managed by its data processor.
Exposed Data Types
5- Names
- Email addresses
- Physical addresses
- Phone numbers
- Hashed passwords
About This Breach
Detected on September 11, 2026 upon notification from the processor, the incident was published by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2039 on September 16, 2026.
The breach affected 5,435 customers, exposing full names, email addresses, physical addresses, phone numbers, and hashed user login credentials.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
