government
healthcare
social media
service provider
fine
education
law enforcement
finance
dark web
security
web
retail
app
phama
insurance
telecoms
charity
travel
manufacturing
legal
operating system
law
tech
ransomware
publishing
story
hacked
malware
unauthorised access
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacking
hacked email
lost device
financial
identity theft
website hacked
stolen documents
ddos
breached
Trojans
RDP
inside job
spear phishing
spyware
cyber attack
breach notification
privacy
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
fraud
VPN
passwords
zero day
3rd parties
state hacking
employee data
remote working
stolen data
Solo Embrague fined 1,800 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Royal Dutch Tennis Association ('KNLTB') fined 525,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Health Care Provider Pays $100,000 Settlement to OCR for Failing to Implement HIPAA Security Rule Requirements
Quest Data Breach Class Action Settlement
Records reveal City of Cartersville paid ransomware attackers $380K
AEMA Hispánica fined 3,600 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Vodafone España, S.A.U. fined 120,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Nigerian man arrested 3 years after $850,000 stolen from Boulder Valley School District
Casa Gracio Operation fined 6,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
HM Hospitales fined 48,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Public Power Corporation S.A. fined 5,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Mymoviles Europa 2000, S.L. fined 1,500 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Xfera Moviles S.A. fined 30,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Vodafone España, S.A.U. fined 42,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Iberdrola Clientes fined 80,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Colegio Arenales Carabanchel (School) fined 3,000 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Grupo Valsor Y Losan, S.L. fined 2,500 Euros for breaching Art. 5 (1) f) GDPR - Insufficient technical and organisational measures to ensure information security
Comune di Urago fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Puerto Rico Hospital Operators Hit with Class Action Over February 2019 Data Breach
RTI - Reti Televisive Italiane s.p.a. fined 20,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Cafetería Nagasaki fined 1,500 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Automoción fined 800 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Queseria Artesenal Ameco S.L. fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Banco Bilbao Vizcaya Argentaria S.L. fined 6,670 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR - Insufficient legal basis for data processing
Iberia Lineas Aereas de Espana, S.A. Operadora Unipersonal fined 20,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 21 GDPR - Insufficient legal basis for data processing
Vodafone España, S.A.U. fined 50,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Vodafone España, S.A.U. fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Vodafone España, S.A.U. fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Comune di Colledara fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Facebook Settles Facial Recognition Lawsuit for $550 Million
Accounting firm fined 1,450 Euros for breaching Art. 24 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Sapienza Università di Roma fined 30,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Azienda Ospedaliero Universitaria Integrata di Verona (Hospital) fined 30,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Google hit with £44m GDPR fine over ads
Community of Francavilla Fontana fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
TIM (telecommunications operator) fined 27,800,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR, Art. 21 GDPR, Art. 32 GDPR - Insufficient legal basis for data processing
Equifax Settles Mega-Breach Lawsuit for $1.38 Billion
Zhang Bordeta 2006, S.L. (Store and Restaurant) fined 3,600 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Allseas Marine S.A. fined 15,000 Euros for breaching Art. 5 (1) a), (2) GDPR - Non-compliance with general data processing principles
Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance fined 9,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
