government healthcare service provider fine social media education finance dark web retail law enforcement web telecoms travel manufacturing operating system legal insurance phama charity app tech gaming publishing transport utilities
story hacked malware ransomware unauthorised access vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
privacy cyber attack breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking remote working stolen data cloud

American College of Greece fined 1,000 Euros for breaching Art. 12 (3), (4) GDPR - Insufficient fulfilment of information obligations
Taiwan's UMC pleads guilty, fined $60 mln in trade secret theft case | Financial Post
Play Orenes, S.L. fined 4,000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Vodafone España, S.A.U. fined 36,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Conseguridad SL fined 50,000 Euros for breaching Art. 37 GDPR - Lack of appointment of data protection officer
Organic Natur 03 S.L. fined 4,000 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
Università Campus Bio-medico di Roma (Polyclinic) fined 20,000 Euros for breaching Art. 5 (2) a), f) GDPR, Art. 9 GDPR - Non-compliance with general data processing principles
Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak fined 54,800 Euros for breaching Art. 12 GDPR, Art. 15 GDPR, Art. 18 (1) c) GDPR, Art. 25 GDPR - Insufficient fulfilment of data subjects rights
Cyprus Police fined 6,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Bank of Cyprus Public Company Ltd fined 15,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 15 GDPR, Art. 32 GDPR, Art. 33 GDPR - Insufficient technical and organisational measures to ensure information security
Grant Ideas Ltd fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
British Airways fined 22,046,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
OCC fines Morgan Stanley $60 million for 2016 data breach | American Banker
Caja Rural San José de Nules S. Cooperativa de Crédito fined 5,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Centro de Investigación y Estudio para la Obesidad, SL fined 50,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Private Person fined 2000 Euros for breaching Art. 5 (1) c) GDPR, Art. 6 GDPR - Non-compliance with general data processing principles
Café Restaurante B.B.B fined 900 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
HHS.gov - OCR Settles Ninth Investigation in HIPAA Right of Access Initiative
CHS/Community Health Systems, Inc. - Complaint; Agreed Final Judgment
Callesgarcia, S.L. fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Lycamobile fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Avata Hispania, S.L. fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 28 (3) g) GDPR - Insufficient legal basis for data processing
New Jersey hospital paid ransomware gang $670K to prevent data leak
35.3 Million Euro Fine for Data Protection Violations in H&M's Service Center
H&M Hennes & Mauritz Online Shop A.B. & Co. KG fined 35,258,708 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Venu Sanz Chef, S.L. fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Scanshare s.r.l. fined 60,000 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Azienda Ospedaliera di Rilievo Nazionale 'Antonio Cardarelli' (Private Hospital) fined 80,000 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 13 GDPR, Art. 28 GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Anthem agrees to pay $39.5M in latest settlement over 2015 hacking - Indianapolis Business Journal
Odin Flissenter AS fined 13,900 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Xfera Moviles S.A. fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Insurer for Healthcare Pays $6.85 Million to Settle Data Breach
HIPAA Business Associate Pays $2.3 Million to Settle Breach Affecting Protected Health Information of Over 6 million Individuals | HHS.gov
Iweb Internet Learning, S.L. fined 7,800 Euros for breaching Art. 7 GDPR, Art. 12 GDPR, Art. 13 GDPR - Insufficient fulfilment of information obligations
GLP Instalaciones 86, SL fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Athens Orthopedic Clinic Pays $1.5 Million to Settle HHS Charges of Noncompliance with HIPAA Rules
Grupo Carolizan fined 3,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Property owners community fined 10,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles
Multiple Penalties Issued to Individual Convicted of Health Information Breaches at Smith Clinic in Camrose - River Radio
Private Person fined 8,000 Euros for breaching Art. 5 GDPR - Non-compliance with general data processing principles