Teollimi

Hepsiburada (D-Market) data breach

Was I affected?

Hepsiburada (D-Market) confirmed a breach affecting about 9,882 people, exposing names, phone numbers, email addresses and addresses. You may be affected if you contacted Hepsiburada customer service by live chat in 2022, or if you sell on or work with Hepsiburada.

Hepsiburada (D-Market) breach facts
AnnouncedNov 4, 2026
When it happenedChat records from 2022; date of access not disclosed
CountryTürkiye
People affected9,882
Data exposedNames, Phone numbers, Email addresses, Addresses and Other details
Through a vendorCustomer service chat provider (not named)
StatusConfirmed by the company or a regulator filing

What happened

Hepsiburada, one of Turkey's largest online marketplaces, reported to the Turkish data protection authority KVKK that attackers gained unauthorized access to some records held by the provider of its customer service chat system, namely chat logs from 2022. The breach affected 9,882 people, including customers, employees, sellers, suppliers' staff and business partners. Exposed data includes names, mobile numbers, email addresses, addresses, order and shipment numbers, complaint records and details of purchased or cancelled products. KVKK published the notice on November 4, 2026; payment card data is not mentioned.

What should I do?

  1. Be wary of calls, texts or emails that quote a Hepsiburada order or shipment number and ask you to pay, confirm a refund or share a code.
  2. Don't click links in unexpected messages about Hepsiburada orders; open the app or website yourself to check.
  3. Ask Hepsiburada about your data at kvk@hepsiburada.com or its call center on 0850 252 40 00.
  4. Never share one-time SMS codes or card details with anyone who contacts you, even if they know your past orders.
XRedditWhatsApp

Check the other services you use →

Sources