Shaya Kahve (Starbucks Turkey) Data Breach
In September 2026, Shaya Kahve Sanayi ve Ticaret A.Ş., the Alshaya Group subsidiary that operates Starbucks coffeehouses across Turkey, experienced a data breach after unauthorized actors accessed systems managed by its third-party data processor.
Exposed Data Types
3- Names
- Email addresses
- Physical addresses
About This Breach
Detected on September 10, 2026 when the processor notified the company, the incident was formally published by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2039 on September 16, 2026.
The compromise affected 133,991 employees and customers, exposing their full names, email addresses, and physical mailing addresses.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
