**North to Investigate Reported Leak of 350,000 People’s Data**
The Turkish Cypriot authorities have announced an investigation into a potential data breach affecting the personal information of over 350,000 individuals. This follows reports that a file from the Turkish Cypriot ‘health ministry’ was allegedly leaked onto the dark web. The announcement was made by Erhan Arikli, the Turkish Cypriot ‘public works minister,’ during a session in the Turkish Cypriot legislature on Monday.
Arikli confirmed that there are allegations regarding the data leak and acknowledged the possibility of its occurrence. He stated, “Is there a possibility that it happened? Yes, there is.” The extent of the breach is currently under investigation by the telecommunications department, which is tasked with assessing the situation and determining the implications of the leak.
In his remarks, Arikli noted that the Turkish Cypriot authorities often face cyberattacks and emphasized that the telecommunications department has been effective in mitigating many of these threats without publicizing them. However, he admitted that the current infrastructure is “really insufficient” to adequately address cybersecurity challenges. As a response to this vulnerability, he revealed plans to establish a dedicated cybersecurity unit and mentioned that support has been requested from Turkey to bolster these efforts.
The issue was further scrutinized by opposition party representative Sami Ozuslu, who raised concerns about the timeline of the reported leak. He pointed out that there were indications that the personal data had surfaced on the dark web approximately six months prior to the current investigation. Ozuslu questioned the authorities about their awareness of the situation, the precautions taken, and the potential risks associated with the data falling into the wrong hands. He expressed frustration over the public being kept uninformed for such an extended period and demanded clarity on whose possession the leaked data might currently reside.
The data reportedly leaked from the ‘health ministry’ includes highly sensitive information such as names, surnames, identity card numbers, passport numbers, dates of birth, places of birth, addresses, parents’ names, telephone numbers, and vaccination records. A report from the newspaper Yeniduzen stated that this data was made available on the dark web on January 8. Cybersecurity experts from the Netherlands, who spoke anonymously, characterized the leak as a significant security crisis, warning that the compromised information could facilitate various criminal activities, including fraud, identity theft, blackmail, and stalking.
Experts have underscored the severity of the situation, indicating that this is not merely an ordinary data breach but a high-level security crisis that could have dire consequences for the lives of hundreds of thousands of individuals. The implications of such a breach extend beyond the immediate risks of identity theft and fraud, potentially affecting the trust and safety of the affected population.
As the investigation unfolds, the Turkish Cypriot authorities are expected to provide further updates on the situation, including the measures being implemented to address the breach and enhance cybersecurity protocols. The incident has raised significant concerns among the public regarding data privacy and the effectiveness of current cybersecurity measures in place within the Turkish Cypriot administration.
The situation remains fluid, and as more information becomes available, stakeholders and the public will be closely monitoring the developments surrounding this serious data privacy issue.