As a result of the examination regarding the data breach occurred in consequence of the vulnerability which arose from the interaction of three distinct features of Facebook system such as “View as”, “Birthday Celebrator” and “Video Uploader”, the Board decided;

1.to impose an administrative fine of 1.150.000 TL to the Company for not taking necessary technical and organizational measures to ensure data security within scope of the Article 12(1) of the Law.

2.to impose an administrative fine of 450.000 TL to the Company for not notifying the breach to the Board within the shortest time in line with the Article 12(5) of the Law.