← KKTC Health Ministry (Turkish Cypriot Administration)

2026 KKTC Health Ministry — alleged dark-web leak of 364k+ public health records (investigation ongoing)

2026 364.0K records affected Share on X

Data compromised

Yenidüzen/Cyprus Mail reporting cites alleged exposure of 364,036 records: names, ID/passport numbers, DOB, birthplaces, addresses, parents' names, phone numbers, vaccination records, and medical data spanning 202 nationalities; separate HIV/AIDS database claim unverified

Technical writeup

Alleged government health data leak — January–June 2026. Newspaper Yenidüzen reported highly sensitive data belonging to 364,036 people registered in the KKTC public health system appeared on a dark-web forum on January 8, 2026 and remained accessible for months before wider public attention in June. Cyprus Mail and Turkish Minute cite Dutch cybersecurity experts who reviewed samples and described the file as easily accessible, with fields including identity numbers, passport numbers, vaccination records, and addresses. KKTC public works minister Erhan Arıklı told legislators the allegation is under investigation and acknowledged it could be true; officials initially found no evidence but later confirmed an inquiry and requested cybersecurity support from Turkey. Opposition parties criticized delayed public notification. BreachHistory indexes the 364,036 figure from trade-press reporting; KKTC had not issued a final confirmed victim breakdown at catalog time.

Root cause

Dark-web forum listing of alleged KKTC health-ministry database first observed January 8, 2026; Turkish Cypriot authorities investigating—Transport Minister Erhan Arıklı acknowledged the allegation may be true

References