> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Baltas Online Allegedly Breached, 750+ Turkish Companies Exposed Through HR Assessment Vendor
- URL: https://darkwebinformer.com/baltas-online-allegedly-breached-750-turkish-companies-exposed-through-hr-assessment-vendor/
- Published: 2026-07-31T15:30:28.000Z
- Updated: 2026-07-31T15:30:28.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![Turkey flag](https://flagcdn.com/w40/tr.png)Turkey HR / Assessment Services Partial Leak + Sale 

## Baltas Online Allegedly Breached, 750+ Turkish Companies Exposed Through HR Assessment Vendor

An actor posting as **WInQ7wk9sA3a** claims to have held **root access for 47 days** to **Baltas Online**, a Turkish HR and assessment firm, and exfiltrated a **500GB+ archive** covering more than **750 corporate clients**. The post names major Turkish conglomerates, banks, telecoms, and airlines among them, along with **defence manufacturers** including a state-owned munitions producer. The claimed material includes **psychometric tests and personality assessments of C-level executives**, 700,000+ candidate profiles, exam PDFs with live answer keys, **interview audio and video recordings**, proctored exam photographs, off-record recruiter notes, and source code. Ten files were released free as proof, with the remainder offered for sale by client. The claim is **unverified**.

Severity CRITICAL 

Client firms750+

Archive500GB+

Candidates700,000+

ActorWInQ7wk9sA3a

### ▣Post details

TargetBaltas Online

Country![Turkey flag](https://flagcdn.com/w40/tr.png)Turkey

SectorHR / Talent assessment

ListingFree sample, rest for sale

AccessRoot, claimed 47 days

Volume500GB+ / 10 files released

ObservedJul 31, 2026

ActorWInQ7wk9sA3a

### !Allegedly included

- Executive psychometric profiles
- Personality assessments
- 700k+ candidate profiles
- 100k+ emails (4.5GB)
- Exam papers (PDF)
- Live answer keys
- Interview audio recordings
- Interview video recordings
- Proctored exam photographs
- Off-record recruiter notes
- Client feedback records
- Partner company contacts
- Assessment methodology
- Platform source code

### ◱Screenshots

[ ![Baltas Online Turkey HR assessment firm data breach forum post screenshot, July 2026 (1 of 2)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/07/798623598762359876235987236598723.png) Screenshot 1 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/07/798623598762359876235987236598723.png) [ ![Baltas Online Turkey HR assessment firm data breach forum post screenshot, July 2026 (2 of 2)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/07/798623598762359876235987236598724.png) Screenshot 2 Redacted preview ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/07/798623598762359876235987236598724.png) 

### ⚠Potential impact

One vendor breach exposes **750+ companies that were never themselves compromised**. The distinctive risk is not the volume but the nature of the material: **psychological profiles of named executives** at defence, banking, and telecoms firms describe stress responses, motivations, and weaknesses, which is precisely the material used for **coercion, recruitment, and social engineering** rather than ordinary fraud. The claimed inclusion of **defence contractor personnel** gives this a counterintelligence dimension. Interview recordings supply voice and likeness for impersonation, and live answer keys undermine hiring processes still in use. The claim is unverified.

### iStatus

Unverified 

Ten sample archives were published as proof, which is **substantially more substantiation than most listings**, though the account is newly created with no standing. Dark Web Informer is **not reproducing the download links, client list, or contact routes**. Named client companies are the actor's claims and are victims of a supplier breach rather than their own. Nothing has been independently corroborated. The claim is **unverified** and Baltas Online has not publicly addressed it.

Want everything on this breach? **Paid subscribers** get the full claim details and more. Check out the [threat feed](https://darkwebinformer.com/threat-feed/), then after subscribing, search there for this alert. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE