Back to all incidents

Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi

ciftay.com.tr
EMERGING

Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

Observable Status EMERGING
Industry / Sector Manufacturing
Incident Classification Third-Party Cloud Compromise
Attributed Threat Actor Qilin
Affected Population 110,000,000 records
First Seen 2026-10-06
Last Updated 2026-10-06
Call Detail Records (CDRs) Customer Telephone Numbers Cell Site Location Identification (CSLI)
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

17% CONFIDENCE
1. Primary Authority UNVERIFIED CLAIM Base weight: 6%
2. Evidence Specificity +11% Domain & Scope Telemetry
3. Corroboration Curve +0% 1 independent domain
4. Timeline & Staleness +0% 1 milestone logged
Corroborated Source Domains:
ransomware.live

Technical Forensic Briefing

Incident Overview

Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi was listed on the Qilin ransomware extortion leak portal. Unverified extortion claim alleging unauthorized network access and data compromise.

This security event involves Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi (ciftay.com.tr), categorized under Manufacturing. Observable incident classification indicates Third-Party Cloud Compromise.

Compromised Assets & Data Scope

Forensic telemetry identifies exposure across: Call Detail Records (CDRs), Customer Telephone Numbers, Cell Site Location Identification (CSLI). Disclosed impact quantification estimates approximately 110,000,000 affected individuals or consumer records.

Threat Actor Attribution: Activity corroborated with tactics associated with Qilin.

Statutory Disclosures & Compliance

No formal federal or state regulatory filings have been confirmed at this time.

Milestone Timeline (1 events logged)

2026-10-06 20:18 UTC
UNVERIFIED CLAIM

Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi Listed on Qilin Ransomware Extortion Portal

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub