government social media healthcare service provider fine education law enforcement finance dark web retail web phama telecoms charity insurance travel app manufacturing operating system legal tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial RDP inside job spear phishing breached skimming
cyber attack breach notification privacy security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day spyware 3rd parties state hacking employee data remote working

Istituto Comprensivo Statale Crucoli Torretta fined 2000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Barcelona Airport Security Guard Association ('AVSAB') fined 3,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Comune di Casaloldo fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bergen Municipality fined 276,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
The Office of the Data Protection Authority for the Bailiwick of Guernsey announced it fined telecom Sure 80,000 GBP for lacking transparency with its data processing over directory inaccuracies
Sure fined £80,000 for data protection breach | Bailiwick Express
Telefónica Móviles España, SAU fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Surveyor General of Poland ('GKK') fined 22,700 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Basketball Federation of Castilla and Leon fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bankia S.A. fined 50,000 Euros for breaching Art. 5 (1) b) GDPR - Non-compliance with general data processing principles
HealthEngine fined for sharing patient data without consent and skewing its reviews
Police Officer fined 48 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Party of the Socialists of Catalonia fined 5,000 Euros for breaching Art. 5 (1) b) GDPR - Non-compliance with general data processing principles
Tusla Child and Family Agency fined 85,000 Euros for breaching Art. 32 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Community of Baronissi fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Cavauto S.R.L. fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Just Landed S.L. fined 3,000 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
GTL S.R.L. fined 3,000 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
GROW BEATS SL fined 3,000 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
OCC Assesses $80 Million Civil Money Penalty Against Capital One | OCC
Capital One agrees to pay $80M fine over 2019 data breach
School fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Restaurant fined 3,000 Euros for breaching Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR - Non-compliance with general data processing principles
Acc Consulting Varsinais-Suomi fined 7,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Spartoo fined 250,000 Euros for breaching Art. 5 (1) GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Supermarket fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
National Institute for Social Security - Department of the Province of Brescia fined 5,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Mapei S.p.A. fined 15,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing
Vodafone España, SAU fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Twitter warns investors of possible fine from FTC consent order probe
Tour & People Max S.L. fined 1,500 Euros for breaching Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Vodafone España SAU fined 45,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Community of Manduria fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Region of Campania fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Community of San Giorgio Jonico fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Communal political association fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 14 GDPR - Insufficient legal basis for data processing
Employer fined 1,700 Euros for breaching Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient fulfilment of data subjects rights
Forbes Hungary fined 560 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
El Real Sporting de Gijón S.A.D. fined 5,000 Euros for breaching Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Xfera Moviles S.A. fined 5,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority