Turkey — Cyber Threat Profile
Turkey enacted a comprehensive Cybersecurity Law in March 2025 and established a dedicated Cybersecurity Presidency in January 2025, but mass data breaches continue unabated, exposing a governance culture reliant on denial and vague acceptance rather than transparent incident response. A 2025 investigation found the personal data of 1.7 million students offered for sale on dark web forums, with multiple credit card leak clusters surfacing through November and December. Organizations in Turkey suffered more than ten cyberattacks on average in the past year. Iranian actors targeted Turkish aerospace and defense industries in late 2024.- National CERT/CSIRT: TR-CERT
- Data protection authority: Personal Data Protection Authority (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.22 / 100, #28 worldwide
- Secure Internet servers per 1M people (2024): 11,103.4 (source: World Bank)
- Internet users (2025): 89.8% of population (source: World Bank)
Latest Turkey coverage
- Hyundai Turkey breach exposes job applicants' test results 2026-08-09 · Cyber Incidents
- New extortion crew claims Turkey's banks and flag carrier 2026-08-01 · Ransomware
- New ransomware crew Doommageddon debuts with a Mercedes-Benz Turk claim 2026-07-06 · Ransomware
Threat actors targeting Turkey
- APT28 APT
- APT41 APT
- BITTER APT
- MuddyWater APT
- Patchwork APT
- Stealth Falcon APT
- Qilin Ransomware · 25 incident(s)
- LockBit Ransomware · 12 incident(s)
- NightSpire Ransomware · 11 incident(s)
- CRPxO Ransomware · 8 incident(s)
- Deadlock Ransomware · 6 incident(s)
- DragonForce Ransomware · 6 incident(s)
- Doommageddon Ransomware · 5 incident(s)
- RansomHub Ransomware · 5 incident(s)
- BlackNevas Ransomware · 4 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- The Gentlemen Ransomware · 4 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- Krybit Ransomware · 2 incident(s)
- Nova Ransomware · 2 incident(s)
- Akira Ransomware · 1 incident(s)
- ALPHV/BlackCat Ransomware · 1 incident(s)
- Audit Team Ransomware · 1 incident(s)
- Blackwater Ransomware · 1 incident(s)
- BravoX Ransomware · 1 incident(s)
- Dire Wolf Ransomware · 1 incident(s)
- Embargo Ransomware · 1 incident(s)
- Fog Ransomware Ransomware · 1 incident(s)
- FunkSec Ransomware · 1 incident(s)
- Hunters International Ransomware · 1 incident(s)
- Medusa Ransomware Ransomware · 1 incident(s)
- SafePay Ransomware · 1 incident(s)
Most targeted sectors
- Manufacturing 40 incident(s)
- Technology 13 incident(s)
- Agriculture & Food 9 incident(s)
- Healthcare 7 incident(s)
- Transportation & Logistics 7 incident(s)
- Business & Professional Services 6 incident(s)
- Construction 6 incident(s)
- Financial Services 6 incident(s)
- Hospitality & Tourism 6 incident(s)
- Retail & Consumer 5 incident(s)
- Government & Public Sector 4 incident(s)
- Energy & Utilities 3 incident(s)
Recent claimed incidents
- Mefa Group www.mefagroup.com.tr / MEFA Endüstri www.mefaendustri.com / and (Efachem, Eco... 2026-09-08 · Manufacturing
- Yapı Merkezi 2026-09-07 · Manufacturing
- Uak University 2026-09-02 · Education
- MNT Tekstil Gıda İnş Tur. San. Tic. Ltd. Şti. 2026-09-02
- Bg Store Mağazacılık A.Ş. 2026-09-02
- Erdem Hospital 2026-08-30 · Healthcare
- Yapı Merkezi İnşaat ve Sanayi Anonim Şirketi 2026-08-28
- Elektrik Mühendisleri Odası 2026-08-28
- Est 1923 Perakende ve İnteraktif Mağazacılık Ticaret Anonim Şirketi 2026-08-28
- Ayaydın Tekstil Turizm Ticaret Sanayi Anonim Şirketi 2026-08-28
- Akpera Gayrimenkul Yatırım A.Ş. 2026-08-28 · Other
- SITTNAK Lojistik A.Ş. 2026-08-28 · Transportation
- Avva Mağazacılık Anonim Şirketi 2026-08-28
- Vitaberg Kozmetik Anonim Şirketi 2026-08-28
- Emre Kuzey Mağazacılık Sanayi ve Ticaret Limited Şirketi 2026-08-27