2026 Mepa Aktif Elektrik — KVKK cyberattack notice; systems disrupted June 16–17
Data compromised
Scope undetermined: exfiltration not confirmed at notice time; potentially employees, customers, suppliers, and business partners
Technical writeup
Turkish KVKK regulator notice — June 24, 2026 (Decision 2026/1266). Mepa Aktif Elektrik Pazarlama reported a June 16–17, 2026 cyberattack disrupting digital systems. Full scope of accessed data categories and exfiltration had not been determined at notification; potentially affected groups include employees, customers, suppliers, and partners.
Root cause
Cyberattack restricting Mepa Aktif digital systems beginning June 16, 2026, detected June 17—KVKK public notice June 24, 2026 (Decision 2026/1266)