DeFacto Data Breach
In April 2021, multinational Turkish apparel and fashion brand DeFacto Perakende Tic. A.Ş. submitted a data breach notification to the Personal Data Protection Authority (KVKK).
Exposed Data Types
6- Customer names and surnames
- Delivery and residential addresses
- Email addresses
- Phone numbers
- Account order history
- Customer shopping preferences
About This Breach
Following the deployment of a software update on the company's e-commerce platform, a caching malfunction occurred within the user account profile system. The technical glitch allowed customers accessing their personal account settings to inadvertently view the personal identities, contact numbers, delivery addresses, and order histories of other shoppers, affecting 2,686 registered customers.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
