Turkey Archives - ICSSTRIVE

Attempted Cyberattack Triggers Short Service Delays at Aras Kargo, Systems Restored

November 30, 2025

Aras Kargo — one of Turkey’s largest parcel delivery and logistics companies — detected an attempted cyberattack on its information systems. Security teams identified the intrusion quickly and intervened using the company’s defensive infrastructure. The attack led to short‑term delays and service interruptions. Some branches temporarily paused services during recovery before resuming deliveries and parcel acceptance. Systems were brought back online rapidly, with cargo operations and delivery functions continuing normally following mitigation.

Ransomware Attack Disrupts Operations at Turkish Information Technologies and Communication Authority (BTHK)

March 28, 2025

Bilgi Teknolojileri ve Haberleşme Kurumu, Turkey’s information technology and communication authority, was hit by an attack on March 28, 2025. The company stated that the attack was detected at an early stage and successfully prevented without any data loss or system disruption. “Contrary to claims in some media outlets, all of our Institution’s systems continue to operate securely and are closed to the outside world. Additional security measures have been implemented. Necessary updates are being rapidly implemented. In this context, following system improvements, routine work will begin as planned on Monday, April 7, 2025.”

On April 4 Kibrispostasi news reported that the website is inaccessible, communication records have been deleted, and number portability between operators has been blocked.

Multi-regional Cyberattack at Luxury Fashion Brand Louis Vuitton

July 2, 2025

Louis Vuitton was the victim of a multi-region cyberattack in July 2025. The attack impacted customers in the UK, South Korea, Turkey, and Portugal. The unauthorized party accessed data such as names, contact information, and purchase history. No financial or payment data was compromised. Louis Vuitton notified affected customers and relevant authorities, including the UK’s Information Commissioner’s Office (ICO) and the CNIL in Europe. The company is investigating the incident while strengthening its security systems.

Bus Services Disrupted after Turkish Transportation App Hack

August 30, 2024

Ekomobil mobile application has been compromised by a previously unknown group calling itself “Cund El Aksa.” The app is a key tool used by residents of Kocaeli for accessing public transportation services. The group sent threatening messages to users and caused disruptions to the city’s bus services.

After gaining control of the application, the hackers sent a chilling message to subscribers. This incident has raised concerns about the security of public digital services as well as the cybersecurity of government funded apps in Türkiye.

Databreach at SunExpress Airlines

July 30, 2024

SunExpress has warned its customers that their email addresses have fallen into the hands of scammers. An external service provider responsible for sending newsletters on behalf of SunExpress was the target of a cyber attack. The incident affects around 250,000 of the airline’s customers.

Broadcasting Operations Brought to Standstill at German Radiostation.

September 16, 2024

The Geretsried radio was the victim of a massive cyberattack, led by Russian hackers, who encrypted all the music files and demanded a high ransom. The management team and the board of directors are working at high pressure to solve the problem. Meanwhile, the radio station broadcasts an emergency program.

Cyberattack Source of Widespread Electricity Cuts Across Istanbul

December 30, 2016

Sources from the Energy Ministry claim that a major cyberattack is the source of the widespread electricity cuts across Istanbul in recent days, according to reports in the Turkish media. “Many infiltration attempts to the systems controlling our transmission and electricity producing lines were determined and prevented. The infiltration attempts are indicators of a major sabotage preparation against Turkey’s national electricity network,” a senior anonymous source said, as quoted by state-run Anadolu Agency. Energy Minister Berat Albayrak said a comprehensive investigation has been launched to figure out the real reasons behind the electricity cuts in a trip to the northwestern province of Kocaeli, which is the main center of the breakdowns.

Baku-Tbilisi-Ceyhan Pipeline explosion

January 1, 2008

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

Honda Manufacturing Attack

June 9, 2020

A ransomware attack took down portions of Honda Motor Co. this week, locking up systems and halting vital manufacturing operations in several countries.