An indictment prepared by the Istanbul Chief Public Prosecutor’s Office seeks prison sentences for seven defendants accused of infiltrating information systems, transferring money from bank accounts, obtaining personal data and copying credit cards. The indictment was accepted by the Criminal Court of First Instance.
Investigation launched after tip
The indictment says a tip submitted to the Provincial Gendarmerie Command alleged that a person named “Osman” was using banking and information systems in Kağıthane, accessing accounts abroad that had shown no activity for a long time and making high-value money transfers.
The tip also alleged that the money would be brought to Türkiye and distributed in cash among 11 residences in Kağıthane. The investigation was launched after the same tip provided information about devices used to copy credit cards.
Codes and personal data found on digital materials
The indictment states that an examination of digital materials seized from the residence of defendant Osman Yıldırım indicated that the seven defendants used the databases of private companies and public institutions as part of a specific organization. It says the defendants used software programs to access banking systems and transfer money from accounts allegedly obtained earlier, arranged for one of the organization’s members to withdraw the money using prepared documents, and sold the data they obtained in exchange for money.
Examinations at the Istanbul Gendarmerie Criminal Laboratory found codes believed to have been used to infiltrate computers and systems, along with identity details and telephone numbers belonging to many people. The digital materials also contained usernames and passwords for social media and email accounts.
Findings involving bank and public databases
The indictment says numerous files named “Searc. Py” were found among the materials and were determined to contain code that could connect to a bank database and enable transfer transactions. The examination also found search records concerning bank security, bank account information and monitoring a computer at another IP address.
The indictment says the abbreviation “HSYS” refers to the Public Health Management System and assesses that data may have been copied through this system. It also states that personal information was accessed using Turkish Republic identification numbers by running an application named “Full exe” found in a folder titled “Mernis Sistem,” and that the database of the Central Population Management System may have been copied.
The digital materials seized from Osman Yıldırım’s home included files registered under the name “Turkey,” numbered from 1 to 30. The files contained records belonging to approximately 660,000 people and approximately 19.8 million telephone numbers.
Organization and defendants’ statements
The indictment alleges that meetings were held by video conference through internet applications to avoid detection and that training sessions were organized on infiltrating information systems. It states that Gökay Celal Gülen provided practical training in technical skills to Osman Yıldırım and Fatih Kulaklı, while Yunus Çolak, Eyüp Yirmili, Barış Serbay Sertler and Erol Çakır were assessed to have carried out the tasks assigned to them.
During Gülen’s statement to the police, he was asked about remarks concerning access to bank accounts and teaching some people how to perform such operations. Gülen claimed that he did not remember the conversation and had not taught anything to Fatih Kulaklı or Osman Yıldırım.
Osman Yıldırım said he recorded video calls held on Zoom because he wanted to learn how to use a computer and avoid forgetting what he had learned. Defendant Erol Çakır said he did not know how to use a computer and had never used one before.
Sentences sought for the defendants
The indictment seeks 19 years and 7 months to 50 years in prison for Gökay Celal Gülen and Osman Yıldırım on charges of establishing an organization for the purpose of committing crimes; producing and selling fake bank or credit cards by linking them to bank accounts belonging to others; unlawfully obtaining or disseminating personal data; and corrupting, destroying or rendering inaccessible data in an information system or placing data in the system.
For Fatih Kulaklı, Barış Serbay Sertler, Erol Çakır, Eyüp Yirmili and Yunus Çolak, the indictment seeks prison sentences ranging from 9 years and 6 months to 26 years on charges of unlawfully obtaining or disseminating personal data and corrupting, destroying or rendering inaccessible data in an information system or placing data in the system.
