Turkey
HR / Assessment Services
Partial Leak + Sale
Baltas Online Allegedly Breached, 750+ Turkish Companies Exposed Through HR Assessment Vendor
An actor posting as WInQ7wk9sA3a claims to have held root access for 47 days to Baltas Online, a Turkish HR and assessment firm, and exfiltrated a 500GB+ archive covering more than 750 corporate clients. The post names major Turkish conglomerates, banks, telecoms, and airlines among them, along with defence manufacturers including a state-owned munitions producer. The claimed material includes psychometric tests and personality assessments of C-level executives, 700,000+ candidate profiles, exam PDFs with live answer keys, interview audio and video recordings, proctored exam photographs, off-record recruiter notes, and source code. Ten files were released free as proof, with the remainder offered for sale by client. The claim is unverified.
▣Post details
Turkey!Allegedly included
- Executive psychometric profiles
- Personality assessments
- 700k+ candidate profiles
- 100k+ emails (4.5GB)
- Exam papers (PDF)
- Live answer keys
- Interview audio recordings
- Interview video recordings
- Proctored exam photographs
- Off-record recruiter notes
- Client feedback records
- Partner company contacts
- Assessment methodology
- Platform source code
◱Screenshots
⚠Potential impact
One vendor breach exposes 750+ companies that were never themselves compromised. The distinctive risk is not the volume but the nature of the material: psychological profiles of named executives at defence, banking, and telecoms firms describe stress responses, motivations, and weaknesses, which is precisely the material used for coercion, recruitment, and social engineering rather than ordinary fraud. The claimed inclusion of defence contractor personnel gives this a counterintelligence dimension. Interview recordings supply voice and likeness for impersonation, and live answer keys undermine hiring processes still in use. The claim is unverified.
iStatus
UnverifiedTen sample archives were published as proof, which is substantially more substantiation than most listings, though the account is newly created with no standing. Dark Web Informer is not reproducing the download links, client list, or contact routes. Named client companies are the actor's claims and are victims of a supplier breach rather than their own. Nothing has been independently corroborated. The claim is unverified and Baltas Online has not publicly addressed it.
DARK WEB INFORMER - THREAT INTELLIGENCE
