Yapı Merkezi Data Breach
In August 2026, Turkish engineering and railway construction firm Yapı Merkezi İnşaat ve Sanayi A.Ş. notified the Personal Data Protection Authority (KVKK) that unauthorized actors breached its corporate network, encrypted internal files, and claimed data exfiltration.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
6- Names
- Government issued IDs
- Employee data
- Contact details
- Internal corporate data
- Financial transactions
About This Breach
Formally announced on September 2, 2026 under KVKK Decision 2026/1914, the incident compromised employee and user identity, contact, personnel, and health records.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
