government healthcare social media service provider fine education finance dark web law enforcement retail web telecoms phama travel manufacturing operating system charity insurance legal app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking remote working stolen data cloud

Judge blesses Corner Bakery's $3.2 mln privacy settlement over employee fingerprint scans
Xfera Moviles S.A. fined 75,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Digi Távközlési Szolgáltató Kft. ('Digi') (electronic communication service provider) fined 288,000 Euros for breaching Art. 5 (1) b), (e) GDPR, Art. 32 (1), (2) GDPR - Insufficient technical and organisational measures to ensure information security
Despite resolution not to give in to hackers’ ransom demands, some cities are still paying up after attacks
FTC Reaches Settlement with Kohl’s over Allegations it Failed to Provide Victims with Information Related to Identity Theft
Property Owner fined 2000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Attorney fined 2000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Salad Market S.L. (Catering Company) fined 3,000 Euros for breaching Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
TELEFONICA MOVILES ESPAÑA, S.A.U. fined 40,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Glovoapp23 fined 25,000 Euros for breaching Art. 37 GDPR - Lack of appointment of data protection officer
Xfera Moviles S.A. fined 39,000 Euros for breaching Art. 5 (1) f) GDPR - Insufficient legal basis for data processing
Equifax Iberica, S.L. fined 75,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Property Owner fined 1,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Chenming Ye (Bazar Real) fined 540 Euros for breaching Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
Consulting de Seguridad e Investigacion Mira Dp Madrid S.L. fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Municipal employee fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Iberdrola Clientes fined 4,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Google faces $5 billion lawsuit for tracking people in incognito mode
Entrepreneur running a non-public nursery and pre-school fined 1,168 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
Taksi Helsinki fined 72,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 35 GDPR - Non-compliance with general data processing principles
Non-profit organisation fined 1,000 Euros for breaching Art. 6 GDPR, Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Unknown Company fined 12,500 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Kymen Vesi Oy fined 16,000 Euros for breaching Art. 35 GDPR - Non-compliance with general data processing principles
Posti Group Oyj fined 100,000 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Canada fines Facebook almost $6.5 million over 'false' data privacy claims
Tusla Child and Family Agency fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Social Media Provider fined 50,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Health and Medical Board of the Region of Örebro County fined 11,200 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Belgian DPA Sanctions Company for Non-Compliance with the GDPR’s DPO Requirements
Telenor Norge AS fined 134,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
The Data Inspectorate issues a penalty fee to the State Service Center
Housing Association fined 500 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
The Dutch Data Protection Authority (AP) has decided to give an administrative fine of 725,000 Euros to an undisclosed company for breaching Art. 5 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
Dutch DPA issues record 725K euro fine for GDPR violations
National Government Service Centre (NGSC) fined 18,700 Euros for breaching Art. 33 GDPR, Art. 34 GDPR - Insufficient fulfilment of data breach notification obligations
Data Breach Settlement Calls for Enhanced Security Measures
Proximus SA fined 50,000 Euros for breaching Art. 31 GDPR, Art. 58 GDPR, Art. 37 GDPR - Lack of appointment of data protection officer
FTC Settles with Company Over Alleged Deceptive Security Practices
Equifax settles Indiana case over massive data breach for $19.5 million
Sanction to Google for denying the right of access, Argentina DPA fines Google 280K pesos