Türkiye
Targets by Group
Türkiye - Targeted Attacks in All period
Posts 257 total Page 1 / 3
| Type | Target | Source | Discovered | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco... View Details | blacknevas | Manufacturing / Engineering | ||
|
https://send.exploit.in/#37608d72633301fc62801dfdf9111dbe!BsYvGiQz6WmjZo1VvPwTi8lU2K7prrPY2q6CdMORZn0List of files. For details and cooperation, write to Telegram https://t.me/BlackNevas or email [email protected] Group is a Turkish industrial group (headquartered in Ankara), founded in 2006. It operates in industrial manufacturing, plastics, rubber, processing, and logistics. The group has over 115,000 m² of production space, over 2,000 employees, and several facilities in Turkey, Romania, and Poland. Its main areas of focus are the automotive industry, white goods, and related industries.MILKRUN — Milkrun Lojistik, the group's logistics division. It provides integrated and smart logistics solutions for group companies and partners (focusing on efficiency, digitalization, and sustainability). It is not the Australian grocery delivery service of a similar name.Efachem, a division specializing in plastic and rubber compounds (compound solutions), develops customized formulas to meet customer needs, ensuring compatibility with production processes and consistent quality.Ecopolymer, a division specializing in raw materials processing and technology, utilizes cutting-edge recycling technologies, converting plastic waste into high-performance raw materials within the framework of a circular economy.All these companies operate as a single ecosystem: production (MEFA Endüstri), raw materials/compounds (Efachem), processing (Ecopolymer), and logistics (Milkrun). |
|||||
| Ransomware | Yapı Merkezi View Details | thegentlemen | Services | ||
|
ym.com.tr rocketreach.co/yapi-merkezi-profile_b5c7f2fff42e0db7 YM Group is a Turkish family-owned manufacturing and brand house founded in 1986 in Istanbul by Yüksel Mehmet Yıldırım, built on a flexible-packaging plant in Çorlu (Halal-certified, exporting to Europe/MENA). Its crown jewel: it owns and operates the legendary American trail-running brand Ultimate Direction (the 1935 inventor of the hydration pack) — designing, manufacturing in Turkey and distributing it worldwide — plus its own jewelry line Ela by YM and investment arm YM Capital. The group follows the classic ladder: manufacturing → own brands → capital, with Halal certification as a niche edge for Gulf/Asian markets. Small core team (~110), private, low-profile, no public financials. Bottom line: a quiet Turkish industrial family that turned commodity packaging profits into ownership of an iconic American outdoor brand. |
|||||
| Breaches | Turkey.7z.001 View Details | Database World ROC | — | ||
|
Turkey Nearly 3 GB of data taken from the Turkey National Police during a two-year operation |
|||||
| Breaches | Turkey.7z.002 View Details | Database World ROC | — | ||
|
Turkey.7z.002 |
|||||
| Ransomware | Uak University View Details | qilin | Education | ||
|
N/A |
|||||
| Ransomware | Erdem Hospital View Details | direwolf | Manufacturing / Engineering | ||
|
Hospitals |
|||||
| Ransomware | SITTNAK Lojistik A.Ş. View Details | Doommageddon | Transportation / Travel / Logistics | ||
|
Status: upcoming | Data size: — | Files: 0 files | Deadline: 2026-09-15T00:00:00Z |
|||||
| Ransomware | Akpera Gayrimenkul Yatırım A.Ş. View Details | Doommageddon | Manufacturing / Engineering | ||
|
Status: upcoming | Data size: — | Files: 0 files | Deadline: 2026-09-15T00:00:00Z |
|||||
| Ransomware | Global Terminal Services View Details | Deadlock | — | ||
|
GTS legally registered as Global Terminal Hizmetleri A.Ş. It is the largest independent storage terminal for liquid fuels and oil in the entire Mediterranean region. 470gb |
|||||
| Breaches | chat.mesa.com.tr.csv View Details | Database World ROC | — | ||
| Ransomware | Tianji Auto Care Service Company View Details | nightspire | Transportation / Travel / Logistics | ||
|
Data is not available now. |
|||||
| Ransomware | Akuur Law Firm View Details | qilin | Finance / Legal / Insurance | ||
|
N/A |
|||||
| Ransomware | Arkın Group / Arkın Casino, The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach View Details | blacknevas | Hospitality / Food & Beverage / Tourism | ||
|
CYBERSECURITY: ARKIN HOTEL GROUP SUFFERS MASSIVE DATA BREACH — OVER 1 TB OF GUEST AND CASINO DATA STOLENCybersecurity experts from Cyclops Threat Intelligence have reported a critical incident affecting the Arkın Group hotel chain (www.arkingroup.com), including its premium properties The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach in Northern Cyprus. According to preliminary assessments, the attackers managed to exfiltrate over one terabyte of internal documents, customer databases, and transaction logs, including confidential information from the Arkın Palm Beach Casino.▎Attack detailsAnalysts have established that the attackers gained initial access through a compromised employee account in the reservations department. Using legitimate remote administration tools, they gradually expanded their privileges, bypassed network segmentation, and exfiltrated a dataset totalling approximately 1.4 TB. Some of the stolen information has already surfaced on underground forums and darknet marketplaces.The stolen data includes:• Full guest profiles (passport details, phone numbers, addresses, stay history);• Financial details of bookings and payment credentials;• The internal CRM system with staff notes on VIP clients;• Casino database: player IDs, deposit amounts, visit frequency, records of chip exchange transactions and fund movements;• Scanned passports, compliance check forms (KYC/AML), including source-of-funds questionnaires for high rollers.▎Objective and likely operatorBased on the intrusion characteristics and tactics used, experts link the incident to the threat group “CryptoRex” (tracked since 2023), which specialises in attacking hospitality and gambling businesses in the Mediterranean region. A combination of financial extortion and data sale to multiple buyers is considered likely. So far, no official ransom demand has been received, but portions of the archives have been put up for auction with a starting price of 8 bitcoins.▎Potential consequences of the leakThe leakage of confidential guest and especially casino client data entails a cascade of risks that go far beyond reputational damage.1. Personal security of high-net-worth guestsThe VIP casino player database, containing passport details, habits, and financial capabilities, serves as a direct “directory” for kidnappers, extortionists, and organised crime groups. Affected individuals may face real threats to their physical safety, as well as targeted blackmail (e.g., threats to expose gambling activity to business partners or family members in countries where gambling is stigmatised).2. Financial fraudPayment data from hotel guests and credit/debit cards linked to casino accounts will enable unauthorised transactions. Given the high credit limits of casino patrons, the scale of potential phishing and card fraud is assessed as very significant.3. Compliance nightmare and regulatory finesAlthough the international casino operators in Northern Cyprus do not directly fall under GDPR, many guests are citizens of the EU, the UK, and CIS countries. The breach demonstrates a flagrant failure to meet personal data protection standards. Lawsuits by affected individuals in national courts and scrutiny by international payment systems (Visa, Mastercard) are possible, which could suspend acquiring services.4. Risks to the casino itself and the jurisdiction[6/9/2026 1:09 PM] ChatGPT 5 | Deepseek | Claude: The exposure of internal AML records documenting the origin of funds and possible links to politically exposed persons could spark money-laundering investigations. For Northern Cyprus’s gambling zone, already under close watch by the FATF, this could lead to tighter international financial monitoring and being placed on grey lists.5. Reputational ruinNo wealthy client will entrust their data to a hotel incapable of protecting basic IT infrastructure. Trust in the Arkın brand, which for decades has built an image of secluded luxury, will be undermined for years. Competitors in the elite leisure market, especially in Dubai, Monaco, and the Maldives, will immediately exploit the situation to poach wary clientele.▎Analysts’ recommendationsCyclops Threat Intelligence strongly advises all individuals who have ever stayed at Arkın hotels or visited Arkın Palm Beach Casino to:• Immediately block and reissue any bank cards used;• Monitor credit reports for new applications;• Enable additional authentication factors on email and financial services;• Be highly critical of any incoming calls or messages demanding identity confirmation or fund transfers — these could be targeted attacks using contextual details from the leaked staff notes.The Arkın Group press office has not yet responded to official inquiries. The company’s website remains operational, but online booking sections are temporarily unavailable. Northern Cyprus authorities stated that they are “aware of the incident” and have begun consultations with EU experts under a cyber-resilience programme.Report prepared by the Thomson Reuters cybersecurity desk based on the Cyclops Threat Intelligence analytical brief. |
|||||
| Ransomware | KUVEYT TURK View Details | CRPxO | Finance / Legal / Insurance | ||
|
Sector: Banking | Data leaked: 0.8 GB |
|||||
| Ransomware | FINANSBANK View Details | CRPxO | Finance / Legal / Insurance | ||
|
Sector: Banking | Data leaked: 2.3 GB |
|||||
| Ransomware | ANADOLUBANK View Details | CRPxO | Finance / Legal / Insurance | ||
|
Sector: Banking | Data leaked: 0.4 GB |
|||||
| Ransomware | THY View Details | CRPxO | Transportation / Travel / Logistics | ||
|
Sector: Aviation | Data leaked: 4.2 GB |
|||||
| Ransomware | DOĞAN HOLDİNG View Details | CRPxO | Finance / Legal / Insurance | ||
|
Sector: Media / Energy Conglomerate | Data leaked: 3.1 GB |
|||||
| Ransomware | ANADOLU SİGORTA View Details | CRPxO | Finance / Legal / Insurance | ||
|
Sector: Insurance | Data leaked: 1.2 GB |
|||||
| Ransomware | ASELSAN View Details | CRPxO | Manufacturing / Engineering | ||
|
Sector: Defense / Electronics | Data leaked: 4.5 GB |
|||||
| Ransomware | A101 View Details | CRPxO | — | ||
|
Sector: Grocery / Retail | Data leaked: 0.2 GB |
|||||
| Ransomware | Db Tarimsal Enerji View Details | qilin | Agriculture / Food | ||
|
N/A |
|||||
| Ransomware | AHENK lab View Details | Deadlock | IT | ||
|
Ahenk Laboratuvarı is an ISO 15189-accredited medical laboratory in Turkey, founded in 1998 and located in Istanbul-Şişli. The company offers services in clinical biochemistry, microbiology, pathology, and genetics, and collaborates with Limbach Laboratories in Germany. |
|||||
| Ransomware | MKS Transformator View Details | nightspire | Manufacturing / Engineering | ||
|
- Accounting / Finance Documents- Projects Data, Purchasing / Procurement Documents- Quality / Document Control- Maintenance, and HR documents- Production / Manufacturing Data |
|||||
| Ransomware | iw steelTEC Makine San. ve Tic. A.Ş. View Details | Doommageddon | Manufacturing / Engineering | ||
|
Status: leaked | Data size: 100 GB | Files: 0 files | Deadline: 2026-03-08T00:00:00Z |
|||||
| Ransomware | HİDROMEK View Details | Deadlock | Manufacturing / Engineering | ||
|
HİDROMEK is a leading Turkish manufacturer of heavy construction machinery recognized globally for its high-performance award-winning heavy equipment. Founded in Ankara in 1978 by mechanical engineer Hasan Basri Bozkurt the company operates six state-of-the-art production facilities across Turkey and Thailand. Its heavy machinery operates in more than 130 countries spanning six continents. Over 880 gigabytes of sensitive internal data were stolen from this company |
|||||
| Ransomware | Assos Pharmaceuticals View Details | qilin | Healthcare / Pharma | ||
|
N/A |
|||||
| Ransomware | Synergy Products View Details | qilin | Healthcare / Pharma | ||
|
N/A |
|||||
| Ransomware | meralmanisa View Details | nova | Manufacturing / Engineering | ||
|
MER-AL was established in Turkey in 2005, but our experience in the automotive industry started in Germany in 1995. MER-AL started its activities with the production of cast filters, which are specifically used to produce aluminum wheels and components produced in low-pressure-casting. In addition, a significant part of the production department consists of “rim pallets” and “rim pallet covers.” As a result, MER-AL is now one of the world’s largest manufacturers of cast filters and rim pallet sets and a well-known brand in this field in many countries - 1.5 GB of sales data and secret documents, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
|||||
| Ransomware | Arkın Group View Details | blacknevas | Construction / Real Estate | ||
|
CYBERSECURITY: ARKIN HOTEL GROUP SUFFERS MASSIVE DATA BREACH — OVER 1 TB OF GUEST AND CASINO DATA STOLENCybersecurity experts from Cyclops Threat Intelligence have reported a critical incident affecting the Arkın Group hotel chain (www.arkingroup.com), including its premium properties The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach in Northern Cyprus. According to preliminary assessments, the attackers managed to exfiltrate over one terabyte of internal documents, customer databases, and transaction logs, including confidential information from the Arkın Palm Beach Casino.▎Attack detailsAnalysts have established that the attackers gained initial access through a compromised employee account in the reservations department. Using legitimate remote administration tools, they gradually expanded their privileges, bypassed network segmentation, and exfiltrated a dataset totalling approximately 1.4 TB. Some of the stolen information has already surfaced on underground forums and darknet marketplaces.The stolen data includes:• Full guest profiles (passport details, phone numbers, addresses, stay history);• Financial details of bookings and payment credentials;• The internal CRM system with staff notes on VIP clients;• Casino database: player IDs, deposit amounts, visit frequency, records of chip exchange transactions and fund movements;• Scanned passports, compliance check forms (KYC/AML), including source-of-funds questionnaires for high rollers.▎Objective and likely operatorBased on the intrusion characteristics and tactics used, experts link the incident to the threat group “CryptoRex” (tracked since 2023), which specialises in attacking hospitality and gambling businesses in the Mediterranean region. A combination of financial extortion and data sale to multiple buyers is considered likely. So far, no official ransom demand has been received, but portions of the archives have been put up for auction with a starting price of 8 bitcoins.▎Potential consequences of the leakThe leakage of confidential guest and especially casino client data entails a cascade of risks that go far beyond reputational damage.1. Personal security of high-net-worth guestsThe VIP casino player database, containing passport details, habits, and financial capabilities, serves as a direct “directory” for kidnappers, extortionists, and organised crime groups. Affected individuals may face real threats to their physical safety, as well as targeted blackmail (e.g., threats to expose gambling activity to business partners or family members in countries where gambling is stigmatised).2. Financial fraudPayment data from hotel guests and credit/debit cards linked to casino accounts will enable unauthorised transactions. Given the high credit limits of casino patrons, the scale of potential phishing and card fraud is assessed as very significant.3. Compliance nightmare and regulatory finesAlthough the international casino operators in Northern Cyprus do not directly fall under GDPR, many guests are citizens of the EU, the UK, and CIS countries. The breach demonstrates a flagrant failure to meet personal data protection standards. Lawsuits by affected individuals in national courts and scrutiny by international payment systems (Visa, Mastercard) are possible, which could suspend acquiring services.4. Risks to the casino itself and the jurisdiction[6/9/2026 1:09 PM] ChatGPT 5 | Deepseek | Claude: The exposure of internal AML records documenting the origin of funds and possible links to politically exposed persons could spark money-laundering investigations. For Northern Cyprus’s gambling zone, already under close watch by the FATF, this could lead to tighter international financial monitoring and being placed on grey lists.5. Reputational ruinNo wealthy client will entrust their data to a hotel incapable of protecting basic IT infrastructure. Trust in the Arkın brand, which for decades has built an image of secluded luxury, will be undermined for years. Competitors in the elite leisure market, especially in Dubai, Monaco, and the Maldives, will immediately exploit the situation to poach wary clientele.▎Analysts’ recommendationsCyclops Threat Intelligence strongly advises all individuals who have ever stayed at Arkın hotels or visited Arkın Palm Beach Casino to:• Immediately block and reissue any bank cards used;• Monitor credit reports for new applications;• Enable additional authentication factors on email and financial services;• Be highly critical of any incoming calls or messages demanding identity confirmation or fund transfers — these could be targeted attacks using contextual details from the leaked staff notes.The Arkın Group press office has not yet responded to official inquiries. The company’s website remains operational, but online booking sections are temporarily unavailable. Northern Cyprus authorities stated that they are “aware of the incident” and have begun consultations with EU experts under a cyber-resilience programme.Report prepared by the Thomson Reuters cybersecurity desk based on the Cyclops Threat Intelligence analytical brief. |
|||||
| Ransomware | degeremcia.com View Details | dragonforce | Other | ||
|
DEGEREMCIA is a food operator that is dedicated to the production, distribution and sale of prepared food. It operates mainly through its own chain of fast-food stores; its main brands include Naturissimo and Soldia. |
|||||
| Ransomware | Güven Mühendislik Makina View Details | Deadlock | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | Maxplast AND Senoco View Details | Deadlock | — | ||
|
Senoco Tekstil Sanayi ve Ticaret A.Ş., a Turkish company specializing in the production of nonwoven fabrics. Maxplast is a Turkish manufacturing company based in Gaziantep that specializes in plastic packaging and houseware solutions. Founded in 2016, the company produces a wide range of PET and PE containers for various industries, including food, cosmetics, agriculture, and chemistry. https://www.maxplast.com.tr/ |
|||||
| Ransomware | KOLORKIM KIMYA View Details | Doommageddon | Manufacturing / Engineering | ||
|
Status: leaked | Data size: 1GB | Files: 1 files | Deadline: 2026-05-10T00:00:00Z |
|||||
| Ransomware | Mercedes-Benz Turk View Details | Doommageddon | Manufacturing / Engineering | ||
|
Status: leaked | Data size: 50GB | Files: 1 files | Deadline: 2026-05-20T00:00:00Z |
|||||
| Ransomware | aydeniz.com View Details | apt73 | Transportation / Travel / Logistics | ||
|
Aydeniz Group is a family-owned group of companies founded in 1975, operating in several key indu... |
|||||
| Breaches | [16.982 lines] anadolu.edu.tr 26-02-25.txt View Details | Database World ROC | — | ||
| Ransomware | Arkin Group View Details | blacknevas | Finance / Legal / Insurance | ||
|
CYBERSECURITY: ARKIN HOTEL GROUP SUFFERS MASSIVE DATA BREACH — OVER 1 TB OF GUEST AND CASINO DATA STOLENCybersecurity experts from Cyclops Threat Intelligence have reported a critical incident affecting the Arkın Group hotel chain (www.arkingroup.com), including its premium properties The Arkın Colony, The Arkın Iskele, and Arkın Palm Beach in Northern Cyprus. According to preliminary assessments, the attackers managed to exfiltrate over one terabyte of internal documents, customer databases, and transaction logs, including confidential information from the Arkın Palm Beach Casino.▎Attack detailsAnalysts have established that the attackers gained initial access through a compromised employee account in the reservations department. Using legitimate remote administration tools, they gradually expanded their privileges, bypassed network segmentation, and exfiltrated a dataset totalling approximately 1.4 TB. Some of the stolen information has already surfaced on underground forums and darknet marketplaces.The stolen data includes:• Full guest profiles (passport details, phone numbers, addresses, stay history);• Financial details of bookings and payment credentials;• The internal CRM system with staff notes on VIP clients;• Casino database: player IDs, deposit amounts, visit frequency, records of chip exchange transactions and fund movements;• Scanned passports, compliance check forms (KYC/AML), including source-of-funds questionnaires for high rollers.▎Objective and likely operatorBased on the intrusion characteristics and tactics used, experts link the incident to the threat group “CryptoRex” (tracked since 2023), which specialises in attacking hospitality and gambling businesses in the Mediterranean region. A combination of financial extortion and data sale to multiple buyers is considered likely. So far, no official ransom demand has been received, but portions of the archives have been put up for auction with a starting price of 8 bitcoins.▎Potential consequences of the leakThe leakage of confidential guest and especially casino client data entails a cascade of risks that go far beyond reputational damage.1. Personal security of high-net-worth guestsThe VIP casino player database, containing passport details, habits, and financial capabilities, serves as a direct “directory” for kidnappers, extortionists, and organised crime groups. Affected individuals may face real threats to their physical safety, as well as targeted blackmail (e.g., threats to expose gambling activity to business partners or family members in countries where gambling is stigmatised).2. Financial fraudPayment data from hotel guests and credit/debit cards linked to casino accounts will enable unauthorised transactions. Given the high credit limits of casino patrons, the scale of potential phishing and card fraud is assessed as very significant.3. Compliance nightmare and regulatory finesAlthough the international casino operators in Northern Cyprus do not directly fall under GDPR, many guests are citizens of the EU, the UK, and CIS countries. The breach demonstrates a flagrant failure to meet personal data protection standards. Lawsuits by affected individuals in national courts and scrutiny by international payment systems (Visa, Mastercard) are possible, which could suspend acquiring services.4. Risks to the casino itself and the jurisdiction[6/9/2026 1:09 PM] ChatGPT 5 | Deepseek | Claude: The exposure of internal AML records documenting the origin of funds and possible links to politically exposed persons could spark money-laundering investigations. For Northern Cyprus’s gambling zone, already under close watch by the FATF, this could lead to tighter international financial monitoring and being placed on grey lists.5. Reputational ruinNo wealthy client will entrust their data to a hotel incapable of protecting basic IT infrastructure. Trust in the Arkın brand, which for decades has built an image of secluded luxury, will be undermined for years. Competitors in the elite leisure market, especially in Dubai, Monaco, and the Maldives, will immediately exploit the situation to poach wary clientele.▎Analysts’ recommendationsCyclops Threat Intelligence strongly advises all individuals who have ever stayed at Arkın hotels or visited Arkın Palm Beach Casino to:• Immediately block and reissue any bank cards used;• Monitor credit reports for new applications;• Enable additional authentication factors on email and financial services;• Be highly critical of any incoming calls or messages demanding identity confirmation or fund transfers — these could be targeted attacks using contextual details from the leaked staff notes.The Arkın Group press office has not yet responded to official inquiries. The company’s website remains operational, but online booking sections are temporarily unavailable. Northern Cyprus authorities stated that they are “aware of the incident” and have begun consultations with EU experts under a cyber-resilience programme.Report prepared by the Thomson Reuters cybersecurity desk based on the Cyclops Threat Intelligence analytical brief. |
|||||
| Breaches | massdesign.com.tr.zip View Details | F1bases | — | ||
| Breaches | yesilbeyaz.com.tr_lnx910.zip View Details | F1bases | — | ||
| Breaches | yesilbeyaz.com.tr_lnx1.zip View Details | F1bases | — | ||
| Ransomware | Software Arge View Details | payload | IT | ||
|
Software Arge is a leading technology company established in 2016, specializing in data analytics, data integration, data management, and artificial intelligence solutions tailored for enterprises. They offer a range of products including Qlik Cloud Analytics, Qlik Sense, and various Talend solutions, aimed at enhancing data-driven decision-making for clients across sectors such as banking, finance, energy, and manufacturing. |
|||||
| Ransomware | parampackaging.com View Details | lockbit5 | Manufacturing / Engineering | ||
|
The Print & Pack group based at Mumbai – India, is a leading manufacturer of top quality printed pac... |
|||||
| Ransomware | Makel Companies Group View Details | qilin | Manufacturing / Engineering | ||
|
N/A |
|||||
| Ransomware | SECiL View Details | Deadlock | IT | ||
|
Seçil Kauçuk is a Turkish manufacturer, founded in 1983, specializing in rubber gaskets, sealing profiles, and industrial molded parts for sectors including construction, automotive, and infrastructure. Operating from a 70,000-square-meter facility in Tarsus, the company exports to over 50 countries and maintains an official R&D center for product testing. |
|||||
| Ransomware | Can Healthcare Group View Details | qilin | — | ||
|
N/A |
|||||
| Ransomware | Cekok View Details | dragonforce | Manufacturing / Engineering | ||
|
Çekok Gıda is a leading fruit and vegetable producer in Turkey and Europe, known for its commitment to sustainable agriculture and high-quality products. The company cultivates 35 types of fruits and vegetables across 13,500 decares of farmland, utilizing advanced technology and adhering to strict environmental and safety |
|||||
| Ransomware | Oztugotomotiv View Details | incransom | Manufacturing / Engineering | ||
|
Öztuğ Otomotiv & Endüstri is a Turkish company established in 1990 in Bursa, specializing in the production of high-precision components for the automotive, industrial, defense, and aerospace sectors. The company offers comprehensive services including design, mold manufacturing, and serial production of plastic, metal, and rubber parts, as well as industrial seals and vibration dampers. Öztuğ Otomotiv utilizes modern equipment (high-tonnage presses, progressive dies) and adheres to international quality standards, including a zero-defect principle and compliance with OEM standards. Financial performance (not publicly disclosed, but the company positions itself as a stable business): As of 2025, the company reports over 35 years of successful operations, more than 300 employees, and three production facilities with a total enclosed area of 12,000 m². Structure and facilities: The company operates three production sites in Hasantığla, Nilüfer (Bursa), and Adapazarı. As of 2025, the workforce comprises over 300 specialists. Production capabilities include plastic injection, metal forming, and rubber molding lines. Laek: 100GB WE HAS COLLECTED SUCH DATA AS: - Confidential documents - Clients Data - NDA - Financial data - Operations - Corporate data - Business Agreements - Development - Financial databases, all transactions, all clients And a lot of other VERY IMPORTANT information! |
|||||
| Ransomware | Adensa Teknoloji View Details | nova | IT | ||
|
http://adensa.tech/ is the website for Adensa Teknoloji, a Turkish software company that offers custom software development and digital solutions. The site is very minimal and provides only a basic introduction to the company's services - sites effected adensa.tech, bringstdu.de, simkaelektronik.ch, Nova Provide tree and samples from stolen data to the company when its get in touch with support department. |
|||||
| Ransomware | Caka Grup Lojistik View Details | thegentlemen | Manufacturing / Engineering | ||
|
cakagrup.com Turkish logistics provider delivering end-to-end solutions for domestic and international freight operations. Core services include warehousing, customs clearance, import-export facilitation, plus specialized trade in glass mosaic and packaging materials. Built on principles of speed, quality, and cost-efficiency, the company advances as a sector pioneer through expert teamwork and unwavering commitment to customer satisfaction. |
|||||
| Ransomware | Emek Elektrik View Details | bravox | Manufacturing / Engineering | ||
|
Emek Elektrik specializes in manufacturing high-performance electrical equipment, including current transformers, voltage transformers, and disconnectors, designed for high efficiency and durability in challenging environments |
|||||
| Ransomware | Mopas Online Supermarket View Details | AuditTeam | Agriculture / Food | ||
|
mopas.com.tr is a prominent Turkish retail chain and e-commerce platform primarily serving the Marmara region, offering an extensive online shopping experience that covers everything from fresh produce, halal meat, and dairy to household cleaning supplies and personal care products, all backed by a robust local delivery network that ensures fast, same-day service for residents in cities like Istanbul and Kocaeli. |
|||||
| Ransomware | tkgm.gov.tr View Details | apt73 | Public Sector | ||
|
TKGM (Tapu ve Kadastro Genel Müdürlüğü) is a government agency from Turkey, the General Dire... |
|||||
| Ransomware | TAKOSAN OTOMOBIL View Details | nightspire | Other | ||
|
- Technical Documents- Financial Sheets- Contracts & Invoices- Business strategy files |
|||||
| Ransomware | Kınık Gross View Details | thegentlemen | Retail / E-commerce | ||
|
kinikgross.com Kınık Gross Toptan Market is the first and only local wholesale market in the Thrace (Trakya) region of Turkey, located in Çorlu. It offers a wide range of products including fresh produce, meat, deli, legumes, cleaning supplies, and personal care items — all at competitive wholesale prices |
|||||
| Ransomware | Arcelik View Details | thegentlemen | IT | ||
|
https://www.zoominfo.com/c/arelik-global/462472631 Stock Symbol ARCLK Revenue $11.8 Billion Arcelik Global is a Turkish multinational household appliances manufacturer headquartered in Istanbul, Turkey. Founded in 1955 as a subsidiary of Koc Holding, the company has grown into a worldwide producer and marketer of consumer durables and consumer electronics. The company operates 46 production facilities across 14 countries. With approximately 55,000 employees globally, Arcelik maintains subsidiaries in 58 countries and provides goods and services in over 145 countries. 22 brands including Arcelik, Beko, Grundig, Blomberg, Arctic, Defy, Dawlance, Hotpoint, Indesit, Leisure, Singer, Voltas Beko, and ElektraBregenz.Confluence: 7,736 spaces, 16,371+ pages, 10,313+ attachments, with full technical documentation, internal rules, marketing, engineering specs, R&D results, quality manuals, and project docs across business units. Jira: 10,419 projects - ETC. Access broker - ADAPTAVIST LTD. Thanks |
|||||
| Ransomware | medical-park View Details | blackwater | Healthcare / Pharma | ||
|
Medical Park Hastaneler Grubu is Turkey's leading healthcare group, operating 36 hospitals across 14 provinces with a workforce of 14,000 employees. They offer a wide range of medical services. |
|||||
| Ransomware | gursoygrup.com.tr View Details | lockbit5 | Construction / Real Estate | ||
|
Gürsoy Grup is a leading company in Turkey with over 30 years of experience, operating in seven sect... |
|||||
| Ransomware | The company MST (Sanko Makina and ASKO Holding) View Details | blacknevas | Manufacturing / Engineering | ||
|
The company MST (Sanko Makina and ASKO Holding) has direct and close ties to the Turkish defense industry. It serves as an important supplier of specialized military engineering equipment for Turkish security forces. Here is exactly how the company is connected to the defense sector: 1. Production of Armored Construction Equipment: Ordinary construction machinery is vulnerable in combat zones. MST develops and manufactures armored backhoe loaders and telehandlers specifically designed for military needs. The cabins, engine compartments, and vital components of these machines are protected by armor capable of withstanding small arms fire and improvised explosive device (IED) blasts. 2. Supplies for the Army and Police: The primary customers for MST's military products are the Turkish Armed Forces (TSK), the General Command of the Gendarmerie, and the General Directorate of Security (Police). 3. Specific Applications: MST's military equipment is actively used by engineering troops and special forces for the following tasks: • Digging trenches and building defensive berms on the front lines; • Dismantling barricades, destroying militant shelters, and clearing streets during anti-terrorist operations (such equipment was heavily used by Turkish security forces during urban operations in the southeastern part of the country); • Safely neutralizing explosive devices on roads; • Constructing and fortifying military outposts and bases. 4. Integration into State Defense Programs: MST works in close cooperation with the Presidency of Defense Industries (SSB) of Turkey. The production of indigenous armored engineering equipment is part of Turkey's state strategy for import substitution and ensuring the national army's independence from foreign suppliers. 5. Participation in Defense Exhibitions: The MST brand regularly showcases its military developments at major international arms exhibitions, such as IDEF (International Defence Industry Fair), offering its armored special equipment not only to the domestic market but also for export to allied nations. Information for our partners: > Over the course of seven months, a significant volume of data was stolen. > The obtained files were encrypted and stored in secure storage. > The stated starting price is 15 bitcoins. |
|||||
| Ransomware | banak.com View Details | apt73 | Retail / E-commerce | ||
|
Banak is a Spanish company that sells furniture and home decor. Internal documents, letters, atta... |
|||||
| Ransomware | Narteks Tekstil A.S View Details | krybit | Manufacturing / Engineering | ||
|
Narteks Tekstil Sanayi ve Ticaret A.Ş., one of the well-known Turkish companies in the cotton yarn and textile industry... |
|||||
| Ransomware | Kolin Turkey View Details | qilin | Construction / Real Estate | ||
| Ransomware | Limkon View Details | qilin | Agriculture / Food | ||
| Ransomware | palladium.gen.tr View Details | krybit | Manufacturing / Engineering | ||
|
Palladium Teknoloji ve Mühendislik Ltd. Şti. is a private Turkish company operating in the field of industrial enginee... |
|||||
| Ransomware | Sadtek View Details | qilin | IT | ||
| Ransomware | PARS AR-GE View Details | nightspire | IT | ||
|
- Project Source Code- Finance Records- Technical Data- Customer Documents- Employee Info |
|||||
| Ransomware | TTAF Defense View Details | nightspire | Manufacturing / Engineering | ||
|
- Projects- Financial Documents>- Quality & Technical & Internal Documents |
|||||
| Ransomware | Teknopres_TR View Details | incransom | Communication / Marketing | ||
|
Our company Teknopres, which was founded in 1978, serves injection casting, mould design and mould construction for the internal and the external markets. Teknopres has the principles of Qualificated Customer Focusing Production. Teknopres has the developing and constantly renewed technology in all departments. The company mainly works for the automotive, construction and electronics sectors. |
|||||
| Ransomware | Tenteks Tente View Details | dragonforce | Hospitality / Food & Beverage / Tourism | ||
|
Tenteks specializes in high-quality awning and shading systems, offering a wide range of models suitable for various applications. The company provides solutions such as bioclimatic pergolas, motorized systems, and other bespoke designs, catering to the needs of both residential and commercial clients. Their products are designed to enhance comfort and aesthetic appeal, making them ideal for hotels, restaurants, pools, balconies, and patios. Operating since 1989, Tenteks is recognized for its durable offerings that comply with European standards, ensuring client satisfaction across multiple countries. |
|||||
| Ransomware | Öztekin Group View Details | dragonforce | Communication / Marketing | ||
|
Öztekin Group specializes in project design and construction of industrial, residential, and commercial buildings. The company emphasizes commitment to promises, respect for project integrity, and adherence to universal standards. Their approach is guided by a dedication to excellent engineering and coordination, aiming to transform visions into reality. They serve clients seeking reliable construction solutions in various sectors. |
|||||
| Ransomware | NEW GENERATION MEDIA View Details | dragonforce | Communication / Marketing | ||
|
NGM is a new generation media and production company founded on the understanding that producing content for the television industry is 'not just a commercial activity, but also a social responsibility'. NGM, having produced many successful projects in a short time , has found its place in the global market with the content it produces, and its series are broadcast on leading TV channels all over the world. NGM's vision, blended with the founders' more than twenty years of experience in their respective fields , continues to produce original content for Turkish and international television. |
|||||
| Ransomware | AKOL LAW View Details | nightspire | Finance / Legal / Insurance | ||
|
- Internal Documents- Financial Documents |
|||||
| Ransomware | Akkök Holding View Details | qilin | Other | ||
| Ransomware | Zabun View Details | thegentlemen | Communication / Marketing | ||
|
zabungrup.com.tr zoominfo.com/c/zabungrupcomtr/1334953411 Zabun Grup specializes in the design and construction of exhibition stands, leveraging extensive experience in both domestic and international prestigious trade fairs. Their projects focus on innovative and functional stand designs that enhance brand representation while prioritizing aesthetics, sustainability, and visitor experience. With a strong infrastructure in Turkey and various locations in Europe, they provide timely and high-quality solutions for both local and international projects. The company is committed to reliability, creativity, quality, and customer satisfaction, aiming to build long-term relationships with clients |
|||||
| Breaches | Turkey.7z.00001 View Details | Database World ROC | — | ||
| Breaches | Turkey.7z.00002 View Details | Database World ROC | — | ||
| Breaches | Turkey.7z.00003 View Details | Database World ROC | — | ||
|
قاعدة بيانات جميع افراد الشرطة التركية (وزارة الداخلية التركية) @ |
|||||
| Breaches | Turkey IS (Admins).7z View Details | Database World ROC | — | ||
| Ransomware | Betesan View Details | dragonforce | Manufacturing / Engineering | ||
|
Betesan is a leading engineering company established in 1992 in Tuzla, specializing in ship electrical contracting and supply of electrical materials. The company offers innovative and high-quality solutions in ship power and automation systems, electrical panels, and control consoles, catering to the maritime and industrial sectors. Betesan also provides tailored solutions for military maritime needs, energy transmission, and processing industries, ensuring reliability and efficiency. With over 30 years of experience, Betesan serves a diverse clientele, including ship owners and operators, industrial facilities, and military forces. |
|||||
| Ransomware | A1 Capital View Details | dragonforce | Finance / Legal / Insurance | ||
|
A1 Capital offers specialized solutions in various fields of capital markets, including equity, Eurobond, Futures and Options (Viop), investment consultancy, portfolio management, and public offerings. The company aims to serve clients looking for comprehensive financial services and personalized investment strategies. They provide various platforms and tools for trading and investment analysis. A1 Capital also runs promotional campaigns to enhance investor experience and engagement. |
|||||
| Ransomware | Erg Otoyol View Details | thegentlemen | Communication / Marketing | ||
|
ergotoyol.com.tr zoominfo.com/c/erg-otoyol-yatırım-ve-i̇şletme-aş/463324492 ERG Otoyol Yatırım ve İşletme A.Ş. is focused on the Ankara-Niğde Motorway Project, which aims to provide high-standard, safe, and uninterrupted transportation across Turkey. The project is significant for connecting the northern and southern regions of the country and enhancing access to various tourism sites along the route. The company operates in accordance with its corporate values and business principles |
|||||
| Ransomware | Ankara-İzmir View Details | thegentlemen | Transportation / Travel / Logistics | ||
|
aniyht.com The Ankara-İzmir High-Speed Railway Line Project (AİYHT) is a significant project under the General Directorate of Infrastructure Investments of the Republic of Turkey's Ministry of Transport and Infrastructure, which will connect Turkey's capital, Ankara, with İzmir, the country's third most populous city. The 503-kilometer-long high-speed railway line will pass through the provincial boundaries of Ankara, Eskişehir, Afyonkarahisar, Kütahya, Uşak, Manisa, and İzmir. |
|||||
| Ransomware | Kopas Cosmetics View Details | qilin | Other | ||
| Ransomware | Terra Real Estate View Details | 0apt | Construction / Real Estate | ||
|
Terra Real Estate is a licensed real estate agency based in Alanya, Antalya, Turkey, operating under the legal entity TERRA Real Estate Emlak İnşaat Limited Şirketi. The company presents itself as a property specialist in Turkey, offering sales and consulting services across locations including Alanya, Antalya, Belek, Bodrum, Gazipaşa, Istanbul, Kemer, Mersin, and Side. Its public materials describe property search, investment support, and related real estate services for buyers in the Turkish market. It was listed as a ransomware victim associated with 0apt. |
|||||
| Ransomware | KAZMILAW.COM View Details | clop | Finance / Legal / Insurance | ||
|
[AI generated] "KAZMILAW.COM" refers to the Kazmi Law office, a firm based in the United States. They offer legal services in various areas such as family law, immigration law, and personal injury law. The firm is headed by Saad Kazmi, an experienced attorney passionate about his clients' rights and justice. The firm serves diverse clients and makes an effort to create personalized strategies for each case. |
|||||
| Ransomware | Şemsioğlu Uşak Ev Tarhanası View Details | qilin | Other | ||
| Breaches | Turkey-R2.sql View Details | Database World ROC | — | ||
| Ransomware | Eurotex View Details | thegentlemen | Communication / Marketing | ||
|
Eurotex operates in Türkiye as a textile manufacturer focused on filament yarns and related textile solutions. Public company profiles describe it as a fiber, yarn, and thread mills business with headquarters in İstanbul and operations in Çorlu, Tekirdağ, serving industrial textile markets. Its website presents products such as polyamide, polyester, specialty, and sustainable yarns for diverse textile applications. In threat-intelligence listings, www.eurotex.com.tr was listed as a ransomware victim associated with thegentlemen. |
|||||
| Ransomware | [Redacted] #1930 View Details | thegentlemen | Other | ||
|
[Redacted] |
|||||
| Breaches | b1nd.net_1xbet_Turkey_Full.zip View Details | formaceft_db | — | ||
| Ransomware | GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ View Details | tengu | IT | ||
|
This is a small to medium-sized Turkish company officially registered in Istanbul, operating in the GSM telecommunications technology and technical services sector. It has complete official documentation but is not very active digitally |
|||||
| Ransomware | Pos Bilişim Teknolojileri View Details | thegentlemen | Communication / Marketing | ||
|
https://www.zoominfo.com/c/pos-bilis%CC%A7im-teknolojileri/459191643 www.posbilisim.com Pos Bilişim is a leading company in the Automatic Identification and Data Collection sector in Turkey, established in 2012. They offer a wide range of products including handheld terminals, barcode readers, printers, and industrial PCs, partnering with brands like Honeywell, Zebra, and TSC. The company provides tailored solutions for various sectors such as retail, logistics, and public services, focusing on enhancing operational efficiency and performance. With a strong financial background and a dedicated team, Pos Bilişim aims to deliver high-quality products and services to its clients. |
|||||
| Ransomware | Dekoyap View Details | thegentlemen | Retail / E-commerce | ||
|
https://www.zoominfo.com/c/dekoyap/471786353 www.dekoyap.net Dekoyap is a company that operates in the Retail industry. It employs 10to19 people and has 1Mto5M of revenue. The company is headquartered in Kocasinan/kayseri, Turkey. In our 15,000 m² area, which is the largest building decoration store in Europe , we offer high quality ceramics, stylish parquets, modern sanitary ware products, stylish bathroom cabinets. |
|||||
| Ransomware | Sönmezler Metal View Details | qilin | Manufacturing / Engineering | ||
| Ransomware | Varimed Medikal View Details | direwolf | Manufacturing / Engineering | ||
|
Manufacturing |
|||||
| Ransomware | KOPA Kozmetik A View Details | qilin | Other | ||
| Ransomware | occgrouptr.com View Details | lockbit5 | Services | ||
|
OCC Group'un temel amacı, grubun yan kuruluşları arasında oluşturduğu sinerjiyle, reklamverenle... |
|||||
| Ransomware | gumustasmaden.com.tr View Details | lockbit5 | Communication / Marketing | ||
|
Gümüştaş is a prominent player in the Turkish mining industry, specializing in the extraction and pr... |
|||||
| Ransomware | geselektrik.com.tr View Details | lockbit5 | Other | ||
|
GES Genel Elektrik Sistemleri Yapım ve Mühendislik A.Ş. specializes in the turnkey installation of e... |
|||||
| Ransomware | bonfilet.com.tr View Details | lockbit5 | Communication / Marketing | ||
|
Bonfilet specializes in fresh and delicious meat products, offering a wide range of options includin... |
|||||