HLY Aromaterapi (Alfheim Aromaterapi) Data Breach
Turkish aromatherapy and cosmetics company HLY Aromaterapi Hizmetleri Kozmetik Sanayi Ticaret A.Ş. (operating Alfheim Aromaterapi) suffered a data breach after unauthorized actors compromised part of its data processor's system and used that foothold to access the company's databases.
Exposed Data Types
3- Personal information
- Contact information
- Account information
About This Breach
The incident was published by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2039 on September 16, 2026.
The breach affected 25,088 employees, users, subscribers/members, customers, and prospective customers, exposing personal data in the identity, contact, and transaction security categories.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
