government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing phama operating system insurance legal charity app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

Xfera Moviles S.A. fined 70,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Orange Espagne S.A.U. fined 80,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Comercial Vigobrandy, SL fined 1,500 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
Iberia Lae SA Operadora Unipersonal fined 40,000 Euros for breaching Art. 58 GDPR - Insufficient cooperation with supervisory authority
Banco Bilbao Vizcaya Argentaria, SA fined 24,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Business ID Theft Soars Amid COVID Closures — Krebs on Security
Coronavirus: England's test and trace programme 'breaks GDPR data law'
Malicious Cryptocurrency Trading Apps Target MacOS Users
Twitter Hijackers Used Well-Honed Fraudster Playbook
Data stolen in ransomware attack on French telco Orange
Ransomware attack on cloud-services provider affects charities and not-for-profits
Argentinian telecom supposedly hit by a crypto ransomware
Data leak: More than 30,000 LPM Property Management clients' personal data available
Arkansas vendor sued over data breach
Heartland Counseling Services announces potential contacts information breach
X-rays of male genitalia may have been shared online by central Pa. imaging employee: police
Israeli Water Infrastructure Hit Again by Cyberattacks
BREAKING: College to notify ransomware victims; offers credit monitoring to college community
Seven 'no log' VPN providers accused of leaking – yup, you guessed it – 1.2TB of user logs onto the internet
The end of Privacy Shield spells trouble for Brexit Britain
Google Ireland Ltd. fined 28 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
340 GDPR fines for a total of €158,135,806 issued since May 2018
New BlackRock Android malware can steal passwords and card data from 337 apps
Walmart Sued Under CCPA After Data Breach
Major US Twitter accounts hacked in Bitcoin scam
US-EU data sharing deal Privacy Shield struck down by European court
Office for geodesy and cartography fined 22,300 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
French pharma company allegedly paid for access to their client files
Citrix denies dark web claim of network compromise and ransomware attack
Report: No-Log VPNs Exposed Users’ Logs and Personal Details for All to See
Operator of CCTV of a residential building fined 5,000 Euros for breaching Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Google Belgium SA fined 600,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 17 (1) a) GDPR, Art. 12 GDPR - Insufficient fulfilment of data subjects rights
TikTok’s Huge Data Harvesting Prompts U.S. Security Concerns
Google Cloud steps up privacy, security with Confidential VMs and Assured Workloads
10 Facts About Passwords to See Before You Make Another One | ID Agent
Iliad Italia S.p.A. fined 800,000 Euros for breaching Art. 5 GDPR, Art. 25 GDPR - Non-compliance with general data processing principles
Wind Tre S.p.A. fined 16,700,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 24 GDPR, Art. 25 GDPR - Insufficient legal basis for data processing
Merlini s.r.l. fined 200,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 28 GDPR, Art. 29 GDPR - Insufficient legal basis for data processing
Wells Fargo Bans TikTok App on Company Devices
The scariest data breach article I’ve read in ages