government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing phama operating system insurance legal charity app tech gaming transport publishing utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day 3rd parties state hacking employee data remote working stolen data

Google-backed Indian delivery startup Dunzo suffers data breach
US Secret Service Forms Cyber Fraud Task Force
Russian Convicted of LinkedIn Hack Spent Years in Custody
Telkomsel Employee Arrested for Data Theft
Xfera Moviles S.A. fined 55,000 Euros for breaching Art. 5 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
School Fitness Holiday & Franchising S.L. fined 5,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Global Business Travel Spain SLU fined 5,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Vodafone España, SAU fined 12,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Centro Internacional De Crecimiento Laboral Y Profesional S.L. fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Auto Desguaces Iglesias S.L. fined 1,500 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Municipality of Rælingen fined 46,660 Euros for breaching Art. 32 GDPR, Art. 35 GDPR - Insufficient technical and organisational measures to ensure information security
East Power Sp. z o.o. fined 3,400 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
Iranian Spies Accidentally Leaked Videos of Themselves Hacking
Zoom-Themed Phishing Campaign Targets Office 365 Credentials
5 Billion Unique Credentials Circulating on Darknet
Mumbai crime: BKC company’s data stolen, clients receive email to boycott it
San Diego man sentenced for ID theft that took millions from military members
FSB Marketplace Takedown and Arrests Targeted “Flint24”
Personal information of Minnesota law enforcement, critical infrastructure personnel published online after massive hack
Trump confirms 2018 US cyberattack on Russian troll farm
The Dark Web of Intrigue: How REvil Used the Underground Ecosystem to Form an Extortion Cartel
Potential Facebook class action
Fine for BKR due to costs of accessing personal data
Egyptian bus operator Swvl hit by data breach
Vancouver Coastal Health hit by cyberattack, but says 'no evidence' data stolen
Motives unclear as cyber attack shuts down RMC network
Vast Phishing Campaign Hits Microsoft Users in 62 Countries
Alsup Rips Feds' 'Mumbo Jumbo' In Russian's Hacking Trial
Forensic Report Deemed Not Privileged: Capital One Ordered to Release Report | Privacy & Information Security Law Blog
Federal judge upholds Maine's strict internet privacy law
Citizen known as “fxmsp” charged with computer fraud, wire fraud, and conspiracy for hacking hundreds of corporate networks in more than 40 countries worldwide
Lawsuit against Pearson over data breach scuttled by injury claims
“Keeper” Magecart Group Infects 570 Sites
Russian BEC Gang Targets Hundreds of Multinational Companies
Microsoft Seizes Domains Used for COVID-19 Phishing Scam
Bureau Krediet Registration ('BKR') fined 830,000 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Opening remarks by Vice-President Jourová and Commissioner Reynders at the press point following the judgment in case C-311/18 Facebook Ireland and Schrems
Complaint Against Delhi University VC Alleges Data Privacy Breach
Soldier accused of leaking troop details to satanic neo-Nazis pleads not guilty
Brazil's Hapvida Discloses Cyber Breach, Potential Client Data Leak