DNC Healthcare Services Ransomware & Patient Data Breach
In October 2026, IT staff at DNC Sağlık Hizmetleri A.Ş. (dncsaglik.com), a private healthcare facility in Çankaya, Ankara, discovered a ransomware attack after a Turkish-language ransom note appeared on a server console and database files were rendered inaccessible.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
4 sensitive11- Medical records
- Diagnoses
- Prescription information
- Health insurance information
- Names
- Government issued IDs
- Phone numbers
- Physical addresses
- Email addresses
- Appointments
- Billing information
About This Breach
Turkey's Personal Data Protection Board (KVKK) published the official breach notice under Decision No. 2026/2282 on October 21, 2026.
The encrypted server contained data belonging to patients, patient relatives, employees, and business partners, including full names, Turkish national ID numbers, phone numbers, addresses, email addresses, special-category health records (examinations, lab tests, diagnoses, prescriptions, and medical treatment history), and financial records (appointments, billing, and SGK/private insurance authorizations). Because the database was encrypted, the exact number of affected individuals could not be determined initially.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
