government social media healthcare service provider fine education law enforcement finance dark web web retail phama app insurance security telecoms charity travel manufacturing operating system legal tech gaming publishing transport
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents hacking financial Trojans inside job RDP spear phishing breached
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud zero day passwords spyware 3rd parties state hacking cloud employee data

National Government Service Centre (NGSC) fined 18,700 Euros for breaching Art. 33 GDPR, Art. 34 GDPR - Insufficient fulfilment of data breach notification obligations
Data Breach Settlement Calls for Enhanced Security Measures
Proximus SA fined 50,000 Euros for breaching Art. 31 GDPR, Art. 58 GDPR, Art. 37 GDPR - Lack of appointment of data protection officer
FTC Settles with Company Over Alleged Deceptive Security Practices
Equifax settles Indiana case over massive data breach for $19.5 million
Sanction to Google for denying the right of access, Argentina DPA fines Google 280K pesos
Phineas Fisher Says They Paid $10,000 Bounty to Person Who Hacked Chilean Military
Xfera Moviles S.A. fined 5,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Enel Energie fined 3,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Poland's data protection authority, the Urząd Ochrony Danych Osobowych, fined the Surveyor General of Poland PLN 100,000 for violations of Articles 5(1) and 6(1) of the EU General Data Protection Regulation in relation to improper data processing.
Speech and Special Education Centre - Mihou Dimitra fined 8,000 Euros for breaching Art. 15 GDPR, Art. 58 GDPR - Insufficient fulfilment of data subjects rights
Unknown Company fined 5,800 Euros for breaching Art. 6 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Oliveros Ustrell, S.L. fined 6,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Telefónica fined 30,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Amalfi Servicios de Restauracion S.L. fined 6,000 Euros for breaching Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Private Person fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Centro De Estudio Dirigidos Delta, S.L. fined 5,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Homeowners Association fined 2000 Euros for breaching Art. 5 GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Google LLC fined 5,000,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR - Insufficient fulfilment of data subjects rights
Breiðholt Upper Secondary School fined 9,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
National Center of Addiction Medicine ('SAA') fined 20,600 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
University of Hertfordshire avoids data breach action by UK watchdog
Creditor fined 870 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Vis Consulting Sp. z o.o. fined 4,400 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
Gesthotel Activos Balagares fined 15,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Retailer fined 3,200 Euros for breaching Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
Private person fined 4,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Liceo Scientifico Nobel di Torre del Greco fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
Liceo Artistico Statale di Napoli fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
San Giorgio Jonico fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing
Representative of a local government fined 290 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing
Vodafone España, S.A.U. fined 24,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Vodafone España, S.A.U. fined 40,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Solo Embrague fined 1,800 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Royal Dutch Tennis Association ('KNLTB') fined 525,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Health Care Provider Pays $100,000 Settlement to OCR for Failing to Implement HIPAA Security Rule Requirements
Quest Data Breach Class Action Settlement
Records reveal City of Cartersville paid ransomware attackers $380K
AEMA Hispánica fined 3,600 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Vodafone España, S.A.U. fined 120,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing