government healthcare social media service provider fine education law enforcement finance security web dark web retail app phama insurance telecoms charity travel manufacturing legal operating system law tech ransomware publishing
story hacked malware unauthorised access vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacking hacked email lost device financial website hacked identity theft ddos stolen documents breached Trojans inside job RDP spear phishing spyware
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking employee data remote working stolen data

Seven 'no log' VPN providers accused of leaking – yup, you guessed it – 1.2TB of user logs onto the internet
The end of Privacy Shield spells trouble for Brexit Britain
Google Ireland Ltd. fined 28 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
340 GDPR fines for a total of €158,135,806 issued since May 2018
New BlackRock Android malware can steal passwords and card data from 337 apps
Walmart Sued Under CCPA After Data Breach
Major US Twitter accounts hacked in Bitcoin scam
US-EU data sharing deal Privacy Shield struck down by European court
Office for geodesy and cartography fined 22,300 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
French pharma company allegedly paid for access to their client files
Citrix denies dark web claim of network compromise and ransomware attack
Report: No-Log VPNs Exposed Users’ Logs and Personal Details for All to See
Operator of CCTV of a residential building fined 5,000 Euros for breaching Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Google Belgium SA fined 600,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 (1) a) GDPR, Art. 12 GDPR - Insufficient fulfilment of data subjects rights
TikTok’s Huge Data Harvesting Prompts U.S. Security Concerns
Google Cloud steps up privacy, security with Confidential VMs and Assured Workloads
10 Facts About Passwords to See Before You Make Another One | ID Agent
Iliad Italia S.p.A. fined 800,000 Euros for breaching Art. 5 GDPR, Art. 25 GDPR - Non-compliance with general data processing principles
Wind Tre S.p.A. fined 16,700,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 24 GDPR, Art. 25 GDPR - Insufficient legal basis for data processing
Merlini s.r.l. fined 200,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 28 GDPR, Art. 29 GDPR - Insufficient legal basis for data processing
Wells Fargo Bans TikTok App on Company Devices
The scariest data breach article I’ve read in ages
Google-backed Indian delivery startup Dunzo suffers data breach
US Secret Service Forms Cyber Fraud Task Force
Russian Convicted of LinkedIn Hack Spent Years in Custody
Telkomsel Employee Arrested for Data Theft
Xfera Moviles S.A. fined 55,000 Euros for breaching Art. 5 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
School Fitness Holiday & Franchising S.L. fined 5,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Global Business Travel Spain SLU fined 5,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Vodafone España, SAU fined 12,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Centro Internacional De Crecimiento Laboral Y Profesional S.L. fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Auto Desguaces Iglesias S.L. fined 1,500 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
East Power Sp. z o.o. fined 3,400 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
Iranian Spies Accidentally Leaked Videos of Themselves Hacking
Zoom-Themed Phishing Campaign Targets Office 365 Credentials
5 Billion Unique Credentials Circulating on Darknet
Mumbai crime: BKC company’s data stolen, clients receive email to boycott it
San Diego man sentenced for ID theft that took millions from military members
FSB Marketplace Takedown and Arrests Targeted “Flint24”
Personal information of Minnesota law enforcement, critical infrastructure personnel published online after massive hack