EU 2024
USA December
| Expand All | Name of Covered Entity | State | Covered Entity Type | Individuals Affected | Breach Submission Date | Type of Breach | Location of Breached Information |
|---|---|---|---|---|---|---|---|
Singapore November
Breach of the Protection Obligation by HMI Institute of Health Science
29 Nov 2024
A financial penalty of $10,000 was imposed and directions were issued to HMI Institute of Health Science for failing to put in place reasonable security arrangements to protect the personal data of former students.
Click here for more information.
Click here for more information.
Turkey November - December
19 December
Public Announcement (Data Breach Notification) – Karadeniz Holding A.Ş.As is known, Article 12, paragraph (5) of the Law No. 6698 on the Protection of Personal Data titled “Obligations regarding data security” stipulates that “In the event that the processed personal data is obtained by others through illegal means, the data controller shall notify the relevant person and the Board of this situation as soon as possible. If necessary, the Board may announce this situation on its own website or by another method it deems appropriate.”In the personal data breach notification submitted to the Board by Karadeniz Holding AŞ, which is the data controller, it is summarized as follows;It is stated that the breach is thought to have occurred due to a cyber attack, and since detailed information on the subject has not yet been determined, studies and research are ongoing,The dates of the breach starting and ending are uncertain and the breach was detected on 10.12.2024, the breach was detected as a result of a routine security check performed after the internet outage on the relevant date,No determination has yet been made regarding the personal data categories affected by the breach,Efforts to determine the number of people and records affected by the breach are ongoing and no determination has yet been made.Although the investigation on the subject is ongoing, it has been decided by the Personal Data Protection Board's decision dated 19.12.2024 and numbered 2024/2193 to announce the data breach notification in question on the Institution's website.Respectfully announced to the public.
12 December
Public Announcement (Data Breach Notification) – Anıl Özel Sağlık Hizmetleri Turizm Ticaret Limited Şirketi (Özel Hisar Tıbbi Merkezi)As is known, Article 12, paragraph (5) of the Law No. 6698 on the Protection of Personal Data titled “Obligations regarding data security” stipulates that “In the event that the processed personal data is obtained by others through illegal means, the data controller shall notify the relevant person and the Board of this situation as soon as possible. If necessary, the Board may announce this situation on its own website or by another method it deems appropriate.”In the data breach notification submitted to the Board by Anıl Özel Sağlık Hizmetleri Turizm Ticaret Limited Şirketi, which is the data controller, it is summarized as follows;The breach occurred between 22.11.2024-24.11.2024 and was detected on 02.12.2024,The breach occurred as a result of a cyber attack, but there is no detailed information about the subject,The data controller cannot currently access the data subject to the breach,The number of people and records affected by the breach is not yet known,The relevant person groups affected by the breach are employees and patients,Health information and identity data were affected by the breach, but there is no detailed information about the subject,The relevant people can get information about the data breach through the data controller's website and physical desks.Although the investigation regarding the subject is ongoing, it was decided by the Personal Data Protection Board's Decision dated 12.12.2024 and numbered 2024/2112 to announce the data breach notification on the Institution's website.Respectfully announced to the public.