A query interface added to Aydo Software's union software was detected in MIT's intelligence studies.
Quick Look
- Within the scope of the intelligence studies carried out by MİT, it was determined that a special query interface that provides access to the information of non-union members was added to some union software developed by Aydo Software.
- During the investigation, it was determined that data sets leaked to the internet from various sources in the past could be queried through this system.
- It was determined that people's identity and population information can be accessed through inquiries made through their ID numbers, and that more comprehensive personal data is contained in the databases in the background of the system.
AI-generated summary
Why It Matters
Within the scope of MİT's intelligence studies, it was determined that a special query interface was added to the union software developed by Aydo Yazılım. This system provided access to the information of people who were not members of the union and T.R. Identity and population information could be accessed through the identification number.
Within the scope of the intelligence studies carried out by MİT, it was determined that a special query interface that provides access to the information of non-union members was added to some union software developed by Aydo Software.
During the investigations, it was determined that data sets leaked to the internet from various sources in the past could be queried through this system. T.R. It was determined that people's identity and population information can be accessed through inquiries made through their ID numbers, and that more comprehensive personal data is contained in the databases in the background of the system.
While it was determined that the query system was used to complete membership information when adding members to unions, it was also revealed that there were records of people under the age of 18 in the databases.
'NVI' IN SYSTEM RECORDS
In the examinations carried out on the servers, it was determined that the phrase 'NVİ' was systematically used in the system records where personal information was kept. It was learned that this use created the impression that the data was sourced from Population and Citizenship Affairs (NVI), but technical examinations revealed that the data in question was not directly obtained from NVI systems. Within the scope of the investigation, it was also determined that Aydo Yazılım provides consultancy services to institutions and organizations under the Personal Data Protection Law (KVKK) under the name 'Clock&Wise'.
During the operation based in Ankara, 5 suspects, including the company owner and his employees, were detained. During the searches carried out at the suspects' homes and workplaces, many computers, mobile phones and digital materials were seized.
It was reported that the investigation into the extent to which the system was used by which unions and the purposes for which the data obtained was processed is ongoing. It was noted that the investigation could be expanded in line with new findings obtained from digital materials.
What to Watch
AI outlook — possibilities, not facts
New suspects may be detained within the scope of the investigation.
Likely · Within weeks
Criminal and administrative sanctions may be imposed on Aydo Yazılım due to KVKK violation.
Possible · Within months
Open Questions
- To what extent was the system used by which unions?
- For what purposes were the data obtained processed?
- How was the data of people under 18 years old obtained and why was it kept?
- By whom and when was the query interface added?
