VavaCars Data Breach
In October 2023, VavaCars (Vava Cars Turkey Otomotiv A.Ş.), a major digital automotive trading and vehicle inspection platform operating in Turkey, reported a cybersecurity breach affecting its customer records.
Exposed Data Types
7- Customer names and surnames
- Physical residential addresses
- Phone numbers
- Email addresses
- IBAN and bank account numbers
- Vehicle identification numbers (VIN) and license plates
- Auction pricing and appraisal details
About This Breach
Threat actors compromised the internal credentials of an authorized employee, gaining access to production databases containing vehicle transaction logs. Officially disclosed by Turkey's Personal Data Protection Authority (KVKK) under Decision 2023/1927, the incident exposed the personal data of 32,589 customers, including full names, home addresses, phone numbers, email addresses, IBANs, banking details, vehicle identification numbers (VIN), license plates, and appraisal auction values.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
