MİT carried out a cyber espionage operation against Aydo Yazılım company

The National Intelligence Organization carried out an operation against cyber spies. As a result of the joint efforts of the Cyber ​​Security Presidency (SGB) and the Gendarmerie General Command (JGK), under the coordination of the National Intelligence Organization (MİT), an operation was carried out on the Ankara-based company "Aydo Yazılım", which provides software services for unions.

During the operation based in Ankara, 5 suspects, including the company owner and his employees, were detained. During the searches carried out at homes and workplaces in Ankara, many computers, mobile phones and digital materials were seized.

A QUERY INTERFACE HAS BEEN ADDED TO UNION SOFTWARE

As a result of MİT's intelligence studies, it was determined that a special query interface was added to some union software developed by Aydo Software, allowing access to information belonging to third parties who are not members of the union.

During the investigations, it was determined that the data sets leaked to the internet from various sources in the past could be queried through the system in question. T.R. It was determined that people's identity and population information can be accessed through queries made through their ID numbers, and that there is a much more comprehensive personal data in the databases in the background of the system.

While it was determined that the query system was used to complete membership information when adding members to unions, it was also revealed that the databases contained records of people under the age of 18. Following this situation, investigations into the purposes for which the extensive data pool was used were deepened.

THE PRESENTATION “NVİ” DRAWED ATTENTION IN THE SYSTEM RECORDS

During the examinations carried out on the servers, it was determined that the phrase "NVİ" was used systematically in the system records where personal information was kept. It was determined that this use created the impression that the data was sourced from Population and Citizenship Affairs. However, as a result of the technical findings obtained, it was revealed that the data in question was not obtained directly from the Population and Citizenship Affairs systems.

IT ALSO PROVIDES SERVICES IN THE FIELD OF PROTECTION OF PERSONAL DATA

Within the scope of the investigation, it was determined that Aydo Yazılım also provides consultancy services to institutions and organizations within the scope of the Personal Data Protection Law (KVKK) under the name "Clock&Wise".

It was revealed that the company, on the one hand, provides consultancy services for the protection of personal data, and on the other hand, allows the query of personal information in union software.

Investigations into the extent to which the system in question is used by which unions and for what purposes the data obtained are processed are ongoing. It is anticipated that the investigation may be expanded in line with new findings obtained from digital materials.