government healthcare social media service provider fine education finance law enforcement dark web retail web phama telecoms charity travel manufacturing insurance operating system app legal tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud zero day passwords 3rd parties state hacking employee data remote working stolen data

High-end Job Recruitment Site Exposes at least 13.7 million Users with Unprotected Server | Workplace Privacy, Data Management & Security Report
Police Officer fined 1,400 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
After account hacks, Twitch streamers take security into their own hands
Oslo Municipal Education Department fined 120,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
SkyMed Medical Evacuation Membership Service Exposed Data of 137k Members - Security Discovery
MongoDB breached - Over 275 Million Records Exposed by Unsecured MongoDB Database
Shopify API flaw offered access to revenue data of thousands of stores | ZDNet
Unknown fined 9,400 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Italian political party Movimento 5 Stelle fined 50,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Don’t Acquire a Company Until You Evaluate Its Data Security
Company in the financial sector fined 80,000 Euros for breaching Art. 5 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Transnational Organized Crime Rewards Program United States Department of State
Unknown fined 1,900 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Hungarian political party fined 34,375 Euros for breaching Art. 33 (1) GDPR, Art. 33 (5) GDPR, Art. 34 (1) GDPR - Insufficient fulfilment of data breach notification obligations
Unknown fined 500 Euros for breaching Unknown - Unknown
Private company working with data from publicly available sources fined 220,000 Euros for breaching Art. 14 GDPR - Insufficient fulfilment of information obligations
Unknown fined 2000 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Unknown fined 2000 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Sprint breach notification (Boost Mobile)
Injustice Ex Machina: Predictive Algorithms in Criminal Sentencing | UCLA Law Review
Lands Authority fined 5,000 Euros for breaching Art. 5 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Unknown fined 20,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
HIV status of over 14,000 people leaked online, Singapore authorities say
Oracle€™s BlueKai Spilled Billions Of Records€™ Of Web-Tracking Data
Google Inc. fined 50,000,000 Euros for breaching Art. 13 GDPR, Art. 14 GDPR, Art. 6 GDPR, Art. 5 GDPR - Insufficient legal basis for data processing
Chinese resume leak breached - NO MORE PRIVACY: 202 MILLION PRIVATE RESUMES EXPOSED
Private person fined 2,200 Euros for breaching Art. 5 (1) a) GDPR, Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 13 GDPR - Insufficient legal basis for data processing
Unknown fined 3,200 Euros for breaching Art. 12 (4) GDPR, Art. 15 GDPR, Art. 18 (1) c) GDPR, Art. 13 GDPR - Insufficient fulfilment of data subjects rights
Quora breached
Marriott Breach -- What Happened, How Serious Is It And Who Is Impacted?
Knuddels.de fined 20,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Experts found data belonging to 82 Million US Users exposed on unprotected Elasticsearch Instances
HSKSG Chartered Accountants Tax Accountants and Business Advisers Nottingham Derby Uttoxeter
Facebook has 'tentatively' concluded that spammers, not foreign agents, are to blame for the biggest hack in its history
California passes law that bans default passwords in connected devices TechCrunch
FCA fines Tesco Bank £16.4m for failures in 2016 cyber attack | FCA
Private car owner fined 300 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Hackers stole customer credit cards in Newegg data breach
British Airways hack: Infosec experts finger third-party scripts on payment pages • The Register
Inside the Magecart Breach of British Airways: How 22 Lines of Code Claimed 380,000 Victims