government healthcare social media service provider fine education finance dark web law enforcement retail web telecoms phama travel manufacturing operating system charity insurance legal app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

DSG Retail Ltd fined £500,000 by the ICO
Asociación de Médicos Demócratas fined 10,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
EDP Comercializadora, S.A.U. fined 75,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
EDP España S.A.U. fined 75,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Vodafone España, S.A.U. fined 44,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
West Georgia Ambulance Company Pays $65,000 to Settle Allegations of Longstanding HIPAA Noncompliance
Canada's broadcasting agency fines company behind the Orcus malware
Aegean Marine Petroleum Network Inc. fined 150,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Website providing legal information fined 15,000 Euros for breaching Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR - Insufficient fulfilment of information obligations
Nursing Care Organisation fined 2000 Euros for breaching Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient fulfilment of data subjects rights
Doorstep Dispensaree Ltd. (Pharmacy) fined 320,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Nusvar AB fined 35,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Eni Gas e Luce fined 3,000,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Eni Gas e Luce fined 8,500,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR, Art. 21 GDPR - Insufficient legal basis for data processing
Unknown Company fined 1,430 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR - Non-compliance with general data processing principles
Shop Macoyn, S.L. fined 5,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Rapidata GmbH fined 10,000 Euros for breaching Art. 37 GDPR - Lack of appointment of data protection officer
Ikea Ibérica fined 10,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Linea Directa Aseguradora fined 5,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Cerrajeria Verin S.L. fined 1,500 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Curenergía Comercializador de último recurso fined 75,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Municipal alderman fined 5,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Mayor fined 5,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Viaqua Xestión Integral Augas de Galicia fined 60,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Sports Bar fined 6,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Xfera Moviles S.A. fined 60,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Corporación radiotelevisión espanola fined 60,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Telefónica SA fined 30,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
General Confederation of Labour ('CGT') fined 3,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
TODOTECNICOS24H S.L. fined 900 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Vodafone España, S.A.U. fined 60,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Cerrajero Online fined 900 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
L. Sp. z o.o. fined 1,770 Euros for breaching Art. 5 (1) a), f) GDPR - Non-compliance with general data processing principles
Spanish complaint leads to 150,000 Euro fine for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Menzis (Health Insurance Company) fined 50,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
UWV (Dutch employee insurance service provider) fined 900,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Jocker Premium Invex fined 6,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Deutsche Wohnen SE fined Unknown Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Austrian Post fined 0 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
LGS Handling Ltd, Louis Travel Ltd, and Louis Aviation Ltd fined 2000 Euros for breaching Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing