government
healthcare
social media
service provider
fine
education
law enforcement
finance
dark web
security
web
retail
app
phama
insurance
telecoms
charity
travel
manufacturing
legal
operating system
law
tech
ransomware
publishing
story
hacked
malware
unauthorised access
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacking
hacked email
lost device
financial
website hacked
identity theft
ddos
stolen documents
breached
Trojans
RDP
inside job
spear phishing
spyware
cyber attack
breach notification
privacy
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
VPN
fraud
passwords
zero day
3rd parties
state hacking
employee data
remote working
stolen data
Allgemeine Ortskrankenkasse ('AOK') (health insurance company) fined 1,240,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
KVKK fines gaming company TRY 1, 100, 000 for breach notification violations
French court slaps down Google’s appeal against $57M GDPR fine
New York College S.A. fined 5,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
UnityPoint Health Reaches $2.8M Settlement Over 2018 Data Breach
How hackers extorted $1.14m from University of California, San Francisco
Department of Home Affairs fined 13,500 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Agencia Española de Protección de Datos, fined Vodafone España 60,000 euros for violating Article 6 of the EU General Data Protection Regulation. An investigation upheld a customer's claims that Vodafone sent emails to them after requesting the deletion of their data.
Miraclia (telecommunications company) fined 7,500 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Comunidad de propietarios demelza beach fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Unknown fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Unknown fined 1,000 Euros for breaching Art. 17 GDPR, Art. 21 GDPR, Art. 31 GDPR - Insufficient fulfilment of data subjects rights
Housing Association fined 1,900 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Non-compliance with general data processing principles
Café Bar fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Judge blesses Corner Bakery's $3.2 mln privacy settlement over employee fingerprint scans
Xfera Moviles S.A. fined 75,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Digi Távközlési Szolgáltató Kft. ('Digi') (electronic communication service provider) fined 288,000 Euros for breaching Art. 5 (1) b), (e) GDPR, Art. 32 (1), (2) GDPR - Insufficient technical and organisational measures to ensure information security
Despite resolution not to give in to hackers’ ransom demands, some cities are still paying up after attacks
FTC Reaches Settlement with Kohl’s over Allegations it Failed to Provide Victims with Information Related to Identity Theft
Property Owner fined 2000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Attorney fined 2000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Salad Market S.L. (Catering Company) fined 3,000 Euros for breaching Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
TELEFONICA MOVILES ESPAÑA, S.A.U. fined 40,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Glovoapp23 fined 25,000 Euros for breaching Art. 37 GDPR - Lack of appointment of data protection officer
Xfera Moviles S.A. fined 39,000 Euros for breaching Art. 5 (1) f) GDPR - Insufficient legal basis for data processing
Equifax Iberica, S.L. fined 75,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Property Owner fined 1,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Chenming Ye (Bazar Real) fined 540 Euros for breaching Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
Consulting de Seguridad e Investigacion Mira Dp Madrid S.L. fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Municipal employee fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Iberdrola Clientes fined 4,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Google faces $5 billion lawsuit for tracking people in incognito mode
Entrepreneur running a non-public nursery and pre-school fined 1,168 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
Taksi Helsinki fined 72,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 35 GDPR - Non-compliance with general data processing principles
Non-profit organisation fined 1,000 Euros for breaching Art. 6 GDPR, Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Unknown Company fined 12,500 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Kymen Vesi Oy fined 16,000 Euros for breaching Art. 35 GDPR - Non-compliance with general data processing principles
Posti Group Oyj fined 100,000 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Canada fines Facebook almost $6.5 million over 'false' data privacy claims
Tusla Child and Family Agency fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
