Interference with Information Systems
Also known as: Data Interference, System Sabotage, Ransomware, DDoS, TCK 244, Data Destruction, Bilişim Sistemini Engelleme ve Bozma
Author Ali Gül
In short
The offence of hindering or disrupting the operation of an information system, or destroying, altering, rendering inaccessible or inserting data into it; covers ransomware and sabotage incidents.
Interference with information systems is unlawful intervention in the operation of an information system or the data in it (Turkish Criminal Code Art. 244). It differs from unauthorised access in that the offender does not merely enter the system but damages it or its data.
Forms of the Offence
- Hindering or disrupting system operation: One to five years’ imprisonment. Denial-of-service (DDoS) attacks fall within this.
- Corrupting, destroying, altering, rendering inaccessible or inserting data: Six months to three years’ imprisonment. Ransomware encrypting data and installing malware fall within this.
- Aggravated form: If committed against a system belonging to a bank, credit institution or public institution, the penalty is increased by half.
- Obtaining a benefit: Obtaining an unjust benefit for oneself or another through these acts carries a heavier penalty.
From the Company’s Perspective
Companies may be both victims and indirectly liable:
- As victims: Ransomware, sabotage or denial-of-service attacks,
- Insider threats: An employee deleting data or disrupting systems when leaving,
- Liability risk: Company employees interfering with a competitor’s systems.
Steps After an Incident
- Isolate affected systems and preserve system logs and images as evidence,
- Assess whether the incident is a personal data breach or cyber incident and do not miss notification deadlines,
- Apply to the public prosecutor and follow the case as an intervening party,
- Start insurance and compensation processes.
See our guide Personal Data Breach: The First 72 Hours. In cybercrimes, security measures may be imposed on the company; see Corporate Criminal Liability.
Frequently Asked Questions
Which offences does a ransomware attack constitute?
A ransomware attack generally constitutes unauthorised access, hindering the system and rendering data inaccessible; the ransom demand may also constitute offences such as robbery or blackmail. The attack may also trigger notification obligations as a personal data breach and cyber incident.
Has an employee who deletes company data when leaving committed an offence?
Yes. Deleting or altering data in the company's system without authorisation may constitute destroying or altering data in an information system. The company should preserve system logs showing the deleted data and who deleted it.
Schedule a meeting with us — the first meeting is free of charge.
Schedule a meeting