government healthcare social media service provider fine education finance law enforcement dark web retail web phama telecoms charity travel manufacturing insurance operating system app legal tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked stolen documents ddos Trojans financial inside job spear phishing RDP skimming spyware
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking employee data remote working stolen data

Equifax to Pay $575 Million as Part of Settlement with FTC, CFPB, and States Related to 2017 Data Breach | Federal Trade Commission
A hacker broke into Bulgaria's tax system and stole the details of every working adult in the country
Equifax exposed 150 million Americans' personal data. Now it will pay up to $700 million
Budapest Environs Regional Court fined 8,575 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bulgarian National Revenue Agency breached
Gastroenterology Services Staten Island NY
Hacked Desjardins data already sold to criminals: report | Montreal Gazette
Marriott faces $123 million GDPR fine in the UK for last year's data breach
BA faces £183m fine over passenger data breach This article is more than 1 month old ICO says personal data of 500,000 customers was stolen from website and mobile app
Treat or trick: we asked people how they feel about sharing fitness data with insurance companies
Private person (soccer coach) fined 11,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Northern District of Georgia | Former Equifax employee sentenced for insider trading | United States Department of Justice
Financial Enterprise fined 2,850 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR - Insufficient legal basis for data processing
Unknown fined 2,850 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing
Unknown fined 15,150 Euros for breaching Art. 33 GDPR - Insufficient fulfilment of data breach notification obligations
Desjardins: Rogue employee caused data breach for 2.9 million members
Haga Hospital fined 460,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Professional Football League (LaLiga) fined 250,000 Euros for breaching Art. 5 (1) a), Art. 7 (3) GDPR - Insufficient fulfilment of information obligations
U.S. Customs and Border Protection says photos of travelers were taken in a data breach
Police Officer fined 800 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Nearly 12 Million Quest Diagnostics Patients’ Medical Info Exposed In New Data Breach Of Third-Party Vendor, American Medical Collection Agency
Claim management company fined 2,850 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Almost 100,000 Westpac customers exposed after cyber security breach
Local bank fined 2000 Euros for breaching Art. 12 (3), (4), (5) GDPR, Art. 15 GDPR, Art. 18 GDPR - Insufficient fulfilment of data subjects rights
Canva hacked - user details accessed, but passwords safe
Massachusetts Chapter 93H: SECURITY BREACHES (Mass. Gen. Laws 93H § 1)
Indiana - Data Protection Overview (Ind. Code §§ 4-1-11 et seq., 24-)
IIIinois 815 ILCS 530/  Personal Information Protection Act.
Section 28-51-104 – Idaho State Legislature (Idaho Stat. §§ 28-51-104 to 107)
HawaII Security Breach of Personal Information (Haw. Rev. Stat. § 487N)
Guam Code Title 9, Chapter 48 - Notificationof Breaches of Personal Information (2019) :: (9 GCA §§ 48.10)
Mayor fined 2000 Euros for breaching Art. 5 (1) b) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Florida - Security of confidential personal information (Fla. Stat. § 501.171)
Understanding The First American Financial Data Leak: How Did It Happen And What Does It Mean?
First American Financial Corp. Leaked Hundreds of Millions of Title Insurance Records
Organizer of SZIGET festival and VOLT festival fined 92,146 Euros for breaching Art. 6 GDPR, Art. 5 (1) b) GDPR, Art. 13 GDPR - Insufficient legal basis for data processing
Data Breach: Truecaller Exposes Indian Users’ Data, Shows Cracks In Cyber Security Infrastructure
Directorate of Social and Child Welfare Institutions of the Ferencvaros District of Budapest fined 286 Euros for breaching Art. 33 GDPR - Insufficient fulfilment of data breach notification obligations
Hack exposed personal data of job candidates at Australia's top companies | Business Insider
Payment service provider UAB MisterTango fined 61,500 Euros for breaching Art. 5 GDPR, Art. 32 GDPR, Art. 33 GDPR - Insufficient fulfilment of data breach notification obligations