government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing phama operating system insurance legal charity app tech gaming transport publishing utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

Paderborner 'Lernstatt' aus dem Internet heraus attackiert
II-Vi Mail Proof US - Breach notifications
The spyware was silently delivered, likely over iMessage
SONOMA RECOVERY SERVICE d/b/a OLYMPIA HOUSE ("OLYMPIA HOUSE") - NOTICE OF DATA BREACH
Florida launches investigation into hacking of its servers
Federal financial regulators propose computer-security incident notification for banks - JURIST - News - Legal News & Commentary
Assurances sought Moray ambulance staff hit by data breach are receiving support | Press and Journal
People's Energy data breach affects all 270,000 customers - BBC News
Service NSW not effectively handling private information: NSW Auditor-General | ZDNet
Telangana Government Site Flaw Exposed Sensitive Data of All Its Employees, Pensioners; Fixed Only After Three Months | Technology News
Finnish government tables laws to protect data from cyber criminals
Microsoft says it identified 40+ victims of the SolarWinds hack | ZDNet
Unsecured Azure blob exposed 500,000+ highly confidential docs from UK firm's CRM customers • The Register
CafePress Reaches $2M Settlement With States Over Data Breach | Connecticut Law Tribune
Maintaining privilege over forensic data-breach reports | Thompson Coburn LLP - JDSupra
Ordine degli Assistenti Sociali della Regione Lazio fined 2000 Euros for breaching Art. 12 (3), (4) GDPR - Insufficient fulfilment of data subjects rights
Comune di Luino fined 10,000 Euros for breaching Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR, Art. 37 (1) a) GDPR, Art. 37 (7) GDPR - Non-compliance with general data processing principles
Comune di Santo Stefano Belbo fined 4,000 Euros for breaching Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR - Non-compliance with general data processing principles
University College Dublin fined 70,000 Euros for breaching Art. 5 (1) e), f) GDPR, Art. 32 (1) GDPR, Art. 33 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Azienda Unità Sanitaria Locale Toscana Sud Est fined 100,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 28 GDPR, Art. 30 GDPR, Art. 32 GDPR, Art. 35 GDPR - Non-compliance with general data processing principles
Miropass S.r.l. fined 40,000 Euros for breaching Art. 5 (1) a), e) GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 28 GDPR - Insufficient legal basis for data processing
Roma Capitale (Rome Municipality) fined 500,000 Euros for breaching Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 28 (2), (3) GDPR, Art. 32 GDPR - Non-compliance with general data processing principles
ID Finance Poland Sp. z o.o. fined 235,300 Euros for breaching Art. 5 (1) f) GDPR, Art. 25 (1) GDPR, Art. 32 (1) b), d), (2) GDPR - Insufficient technical and organisational measures to ensure information security
Doctor fined 6,000 Euros for breaching Art. 32 GDPR, Art. 33 GDPR - Insufficient technical and organisational measures to ensure information security
IndiGo Says Some Data May be Compromised in Server Breach
The pharmaceutical group Fareva victim of a cyber attack
Microsoft says it found malicious software in its systems | Reuters
Iranian nation-state hackers linked to Pay2Key ransomware
Nuclear weapons agency breached amid massive cyber onslaught - POLITICO
Ransomware masquerades as mobile version of Cyberpunk 2077
Cyber ​​attack in Évreux: the services of the City and the agglomeration paralyzed
Unknown fined 97,150 Euros for breaching Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 9 (1) GDPR, Art. 12 GDPR - Insufficient legal basis for data processing
Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) fined 55,400 Euros for breaching Art. 25 (1), (2) GDPR, Art. 32 (1) b) GDPR, Art. 34 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Unknown fined 1,940 Euros for breaching Art. 5 (1) b), c) GDPR, Art. 13 (1) GDPR - Insufficient fulfilment of information obligations
Hackers used SolarWinds' dominance against it in sprawling spy campaign | Reuters
Dutch Hacker Who Claimed To Access Trumps Twitter Account Will Walk Free After Police Investigation
Seine-Saint-Denis. Puppet in turn victim of a cyberattack
Company that Provides Travel Emergency Services Settles FTC Allegations it Failed to Secure Sensitive Consumer Data | Federal Trade Commission
MEDNAX Services, Inc. - Breach notification
NEXA Mortgage sued over broker's alleged data theft - HousingWire