Eve Kozmetik Data Breach
In September 2026, Turkish cosmetics and personal care retailer Eve Kozmetik (operated under Yeni Mağazacılık A.Ş.) suffered a data breach after threat actors exploited a third-party software library vulnerability on a server managed by its data processor.
Exposed Data Types
3- Names
- Email addresses
- Phone numbers
About This Breach
Detected on September 10, 2026 when the processor notified the company, the incident was publicly disclosed by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2039 on September 16, 2026.
Because Eve Kozmetik's IT infrastructure remained segregated following its corporate merger with Yeni Mağazacılık A.Ş., the compromise was confined to Eve Kozmetik's customer base. The breach exposed the full names, email addresses, and phone numbers of 6,263,305 customers.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
