Kurukahveci Mehmet Efendi Data Breach
In October 2026, historic Turkish coffee producer Kurukahveci Mehmet Efendi Mahdumları Gıda Sanayi ve Ticaret A.Ş. suffered a data breach after threat actors exploited a third-party software library vulnerability on a server managed by its data processor.
Exposed Data Types
6- Names
- Phone numbers
- Email addresses
- Physical addresses
- Hashed passwords
- Account information
About This Breach
Detected on October 7, 2026 upon notification from the processor, the incident was published by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2281 on October 21, 2026.
The breach affected up to 15,321 individuals across employees, customers, and prospective customers, comprising up to 15,303 end customers and 18 seller (admin) panel account holders. Exposed records included store customers' full names, phone numbers, email addresses, physical addresses, and hashed password values, as well as seller panel user accounts and their hashed password values.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
