Shaya Mağazacılık Data Breach
In September 2026, Shaya Mağazacılık A.Ş. (the Turkish retail subsidiary of Alshaya Group operating multiple international fashion and lifestyle brands) suffered a data breach following unauthorized access to systems hosted by its third-party data processor.
Exposed Data Types
3- Names
- Email addresses
- Physical addresses
About This Breach
Identified on September 10, 2026 upon notification from the processor, the incident was published by Turkey's Personal Data Protection Board (KVKK) under Decision No. 2026/2039 on September 16, 2026.
The breach affected 2,298,726 individuals across both employee and customer groups, exposing full names, email addresses, and physical mailing addresses.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
