Report a security issue

If you have found a security weakness in Lucibook, or you think something has gone wrong with the security of your account or your data, please tell us straight away.

How to report

Email security@lucibook.co.uk. You can write in English or Turkish.

What to include

• What you found and where (the page address, API endpoint or feature).
• The steps needed to reproduce it, and what you expected to happen instead.
• When you noticed it, and whether it is still happening.
• How to reach you, so that we can ask follow-up questions.

Please do not include passwords, full bank details or other people's personal data in the email.

What happens next

We will acknowledge your report within 2 working days, tell you whether we can reproduce the problem, and keep you updated until it is resolved.

Ground rules

• Do not access, change or delete data that belongs to other people. If you come across such data by accident, stop and tell us.
• Do not run destructive tests, denial-of-service tests or automated scans that degrade the service.
• Please do not disclose the issue publicly until we have had a reasonable chance to fix it.

If you are a customer

If you think your account or your data may have been affected, for example you see activity you do not recognise, email security@lucibook.co.uk and tell us which organisation is involved.