government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing phama operating system insurance legal charity app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking remote working stolen data cloud

Ikea Ibérica fined 10,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Linea Directa Aseguradora fined 5,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Cerrajeria Verin S.L. fined 1,500 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Curenergía Comercializador de último recurso fined 75,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Municipal alderman fined 5,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Mayor fined 5,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Viaqua Xestión Integral Augas de Galicia fined 60,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Sports Bar fined 6,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Xfera Moviles S.A. fined 60,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Corporación radiotelevisión espanola fined 60,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Telefónica SA fined 30,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
General Confederation of Labour ('CGT') fined 3,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
TODOTECNICOS24H S.L. fined 900 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Vodafone España, S.A.U. fined 60,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Cerrajero Online fined 900 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
L. Sp. z o.o. fined 1,770 Euros for breaching Art. 5 (1) a), f) GDPR - Non-compliance with general data processing principles
Spanish complaint leads to 150,000 Euro fine for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Menzis (Health Insurance Company) fined 50,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
UWV (Dutch employee insurance service provider) fined 900,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Jocker Premium Invex fined 6,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Deutsche Wohnen SE fined Unknown Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Austrian Post fined 0 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd fined 2000 Euros for breaching Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd fined 10,000 Euros for breaching Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd fined 70,000 Euros for breaching Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
Vodafone España, S.A.U. fined 36,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Military Hospital fined 7,400 Euros for breaching Art. 32 GDPR, Art. 33 GDPR - Insufficient fulfilment of data breach notification obligations
Vodafone España, S.A.U. fined 60,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Wind Hellas Telecommunications fined 20,000 Euros for breaching Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Major of Aleksandrów Kujawski fined 9,380 Euros for breaching Art. 28 GDPR - Insufficient data processing agreement
ClickQuickNow fined 47,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Iberdrola Clientes fined 8,000 Euros for breaching Art. 31 GDPR - Insufficient cooperation with supervisory authority
Xfera Moviles S.A. fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Unknown Company fined 2,860 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR - Non-compliance with general data processing principles
Telecommunication Service Provider fined 200,000 Euros for breaching Art. 5 (1) c) GDPR, Art. 25 GDPR - Non-compliance with general data processing principles
Town of Kerepes fined 15,100 Euros for breaching Art. 6 (1) GDPR - Insufficient legal basis for data processing
Vueling Airlines fined 30,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Delivery Hero fined 195,407 Euros for breaching Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Merchant fined 10,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Brokerage Firm Hit With $500,000 Data Breach Penalty