Papara Menkul Değerler Data Breach
In September 2026, Turkish brokerage firm Papara Menkul Değerler A.Ş. notified the Personal Data Protection Authority (KVKK) of a cybersecurity incident after a social engineering phishing attack targeting overseas data processor employees led to unauthorized access on its Okta Single Sign-On (SSO) platform.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
6- Names
- Government issued IDs
- Phone numbers
- Email addresses
- Financial transactions
- User IDs
About This Breach
Announced under KVKK Decision 2026/2144, the incident affected encrypted customer records containing names, emails, phone numbers, addresses, investment profiles, and FATCA tax status.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
