Baydöner Data Breach Exposes 1.2M Customer Records, Including Plaintext Passwords Last week, Turkish restaurant chain Baydöner suffered a significant data breach, exposing 1.2 million unique email addresses alongside customers’ names, phone numbers, cities, and plaintext passwords. The incident was flagged by security researcher Troy Hunt, who added the compromised data to the Have I Been Pwned database for public verification. Analysis of the leaked records revealed that 28% of the exposed email addresses were already linked to LinkedIn accounts, increasing the risk of targeted phishing or credential-stuffing attacks. The inclusion of plaintext passwords rather than hashed or encrypted versions heightens concerns about potential account takeovers, as users who reuse passwords across platforms face immediate vulnerability. The breach underscores persistent risks in data security practices, particularly the storage of sensitive information in unsecured formats. No details have been disclosed regarding the attack vector or whether Baydöner has notified affected customers. The incident adds to a growing trend of hospitality-sector breaches, where customer data remains a high-value target for cybercriminals.