Confirmed breach

Hepsiburada data breach

TRTürkiye

Yeni Şafak, gdhdijital and Malatya Sonsöz Haber reported a data breach at Hepsiburada (Türkiye) on 5 November 2026, and it has been confirmed. It affected 9,882 people.

People affected: 9,882people
Reported: 5 November 2026News report and 7 more

What was exposed 11

Email addresses
Phone numbers
Names
Addresses
Order records
Purchase history
Complaints and inquiries
Chat records

Show 3 more

Contact information
Shipment numbers
Complaint records

How it happened

How: Hacking in a cyber attack directed at the chat infrastructure source
Our translation from Turkish
sohbet altyapısına düzenlenen siber saldırıda
Way in: sohbet altyapısı in a cyber attack directed at the chat infrastructure used by the company source
Our translation from Turkish
Şirketin hizmet aldığı sohbet altyapısına düzenlenen siber saldırıda

Sources 8

News reportYeni ŞafakData breach at Hepsiburada: Information of approximately 10 thousand people leaked (our translation from Turkish)5 November 2026 · 9,882 people
Confirmed by Kişisel Verileri Koruma Kurumu (KVKK): The Personal Data Protection Authority (KVKK) announced to the public a data breach affecting 9,882 people at Hepsiburada
Our translation from Turkish
Kişisel Verileri Koruma Kurumu (KVKK), Hepsiburada'da 9 bin 882 kişiyi etkileyen veri ihlalini kamuoyuna duyurdu
News reportgdhdijitalAttention to those who order from the Internet! Thousands of people's data in danger (our translation from Turkish)5 November 2026 · 9,882 people
Confirmed by Kişisel Verileri Koruma Kurumu (KVKK): The Personal Data Protection Authority (KVKK) shared with the public the breach notification made by D-Market Elektronik Hizmetler ve Ticaret A.Ş., to which the platform is affiliated
Our translation from Turkish
Kişisel Verileri Koruma Kurumu (KVKK), platformun bağlı olduğu D-Market Elektronik Hizmetler ve Ticaret A.Ş. tarafından yapılan ihlal bildirimini kamuoyuyla paylaştı
News reportilksesData scandal at online shopping giant! Thousands of users' information stolen from Hepsiburada (our translation from Turkish)5 November 2026 · 9,882 people
Confirmed by Kişisel Verileri Koruma Kurumu (KVKK): Public notice published by the Personal Data Protection Authority (KVKK)
Our translation from Turkish
Kişisel Verileri Koruma Kurumu (KVKK) tarafından yayımlanan kamuoyu duyurusu
News reportBursada BugünData breach alarm at famous shopping platform! Unauthorized access to information of thousands of people was provided (our translation from Turkish)5 November 2026 · 9,882 people

Show all 8 sources

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If Hepsiburada had your data

Look for Hepsiburada’s own notice or letter: it should say what of yours was involved. Keep it.
Your email address is out: expect convincing phishing. Open Hepsiburada by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Your home address is out: be wary of letters, parcels or visitors that mention Hepsiburada, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be Hepsiburada, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use Hepsiburada? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the Hepsiburada breach

Was Hepsiburada hacked?

Yeni Şafak, gdhdijital and Malatya Sonsöz Haber reported a data breach at Hepsiburada (Türkiye) on 5 November 2026, and it has been confirmed. It affected 9,882 people. How it happened, by the sources: hacking, through sohbet altyapısı.

What data was exposed in the Hepsiburada breach?

Email addresses, Phone numbers, Names, Addresses, Order records, Purchase history, Complaints and inquiries, Chat records, Contact information and Shipment numbers, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Hepsiburada data breach settlement?

No settlement open for claims is on record for Hepsiburada as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Hepsiburada breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Hepsiburada’s own site, or check the letter here.

More breaches in Türkiye

Every breach in Türkiye →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.