This is a huge security issue according to Turkish law (called KVKK). They should report this security breach here https://www.kvkk.gov.tr/veri-ihlali-bildirimi/ but I haven't seen anything reported from them.