Karaköy Güllüoğlu (Güllüoğlu Gıda) Data Breach
In October 2026, historic Istanbul confectionery and baklava producer Güllüoğlu Gıda San. ve Tic.
Exposed Data Types
6- Names
- Phone numbers
- Email addresses
- Physical addresses
- Passwords
- Account information
About This Breach
A.Ş. (operating Karaköy Güllüoğlu) suffered a data breach after threat actors exploited a third-party software library vulnerability on a server managed by its data processor. Detected on October 8, 2026 upon notification from the processor, the incident was published by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2281 on October 21, 2026.
The breach affected 67,193 users, exposing store customers' full names, phone numbers, email addresses, physical addresses, and stored password values alongside seller panel user accounts and stored password values.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
