Coordinated by intelligence agency MİT, the Cybersecurity Directorate and Gendarmerie raided Ankara-based Aydo Yazılım, a company selling software to trade unions, detaining five people including the company owner. Investigators found a hidden interface added to union software allowed access to leaked data, and that databases included records of people under 18.
During the searches, numerous computers, mobile phones and digital materials were seized. It was determined that the 'NVİ' label, which gave the impression that the data originated from the Population and Citizenship Affairs, had no connection to real systems. It is anticipated that the investigation could be expanded to determine which trade unions were affected.