FLO Mağazacılık (InStreet) Data Breach
In June 2021, major Turkish footwear and fashion retailer FLO Mağazacılık ve Pazarlama A.Ş. submitted a data breach notification to the Personal Data Protection Authority (KVKK) regarding its sportswear e-commerce platform InStreet (instreet.com.tr).
Exposed Data Types
6- Names and surnames
- Usernames
- Hashed and plain passwords
- Partial payment card numbers (first 4 and last 4 digits)
- Bank names
- Customer email addresses
About This Breach
The company discovered that user database records were publicly published on an external unauthorized web page. The incident compromised personal details for approximately 3,500 customers, including names, usernames, account passwords, and for 380 customers, the first and last four digits of payment cards along with the issuing bank names.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
