government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing operating system phama insurance legal charity app gaming tech publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day 3rd parties state hacking employee data remote working stolen data

Insurer for Healthcare Pays $6.85 Million to Settle Data Breach
HIPAA Business Associate Pays $2.3 Million to Settle Breach Affecting Protected Health Information of Over 6 million Individuals | HHS.gov
Iweb Internet Learning, S.L. fined 7,800 Euros for breaching Art. 7 GDPR, Art. 12 GDPR, Art. 13 GDPR - Insufficient fulfilment of information obligations
GLP Instalaciones 86, SL fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Athens Orthopedic Clinic Pays $1.5 Million to Settle HHS Charges of Noncompliance with HIPAA Rules
Grupo Carolizan fined 3,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Property owners community fined 10,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Multiple Penalties Issued to Individual Convicted of Health Information Breaches at Smith Clinic in Camrose - River Radio
Private Person fined 8,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Political Party fined 1,500 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Warsaw University of Life Sciences fined 11,200 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Former mayor of a community fined 0 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Istituto Comprensivo Statale Crucoli Torretta fined 2000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Barcelona Airport Security Guard Association ('AVSAB') fined 3,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Comune di Casaloldo fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bergen Municipality fined 276,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
The Office of the Data Protection Authority for the Bailiwick of Guernsey announced it fined telecom Sure 80,000 GBP for lacking transparency with its data processing over directory inaccuracies
Sure fined £80,000 for data protection breach | Bailiwick Express
Telefónica Móviles España, SAU fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Surveyor General of Poland ('GKK') fined 22,700 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Basketball Federation of Castilla and Leon fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bankia S.A. fined 50,000 Euros for breaching Art. 5 (1) b) GDPR - Non-compliance with general data processing principles
HealthEngine fined for sharing patient data without consent and skewing its reviews
Police Officer fined 48 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Party of the Socialists of Catalonia fined 5,000 Euros for breaching Art. 5 (1) b) GDPR - Non-compliance with general data processing principles
Tusla Child and Family Agency fined 85,000 Euros for breaching Art. 32 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Community of Baronissi fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Cavauto S.R.L. fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Just Landed S.L. fined 3,000 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
GTL S.R.L. fined 3,000 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
GROW BEATS SL fined 3,000 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
OCC Assesses $80 Million Civil Money Penalty Against Capital One | OCC
Capital One agrees to pay $80M fine over 2019 data breach
School fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Restaurant fined 3,000 Euros for breaching Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR - Non-compliance with general data processing principles
Acc Consulting Varsinais-Suomi fined 7,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Spartoo fined 250,000 Euros for breaching Art. 5 (1) GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Supermarket fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
National Institute for Social Security - Department of the Province of Brescia fined 5,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Mapei S.p.A. fined 15,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing