government healthcare service provider fine social media education finance dark web retail law enforcement web telecoms travel manufacturing operating system legal insurance phama charity app tech gaming publishing transport utilities
story hacked malware ransomware unauthorised access vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
privacy cyber attack breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day 3rd parties state hacking employee data remote working stolen data

Political Party fined 1,500 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Warsaw University of Life Sciences fined 11,200 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Former mayor of a community fined 0 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Istituto Comprensivo Statale Crucoli Torretta fined 2000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Barcelona Airport Security Guard Association ('AVSAB') fined 3,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Comune di Casaloldo fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bergen Municipality fined 276,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
The Office of the Data Protection Authority for the Bailiwick of Guernsey announced it fined telecom Sure 80,000 GBP for lacking transparency with its data processing over directory inaccuracies
Sure fined £80,000 for data protection breach | Bailiwick Express
Telefónica Móviles España, SAU fined 75,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Surveyor General of Poland ('GKK') fined 22,700 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Basketball Federation of Castilla and Leon fined 5,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Bankia S.A. fined 50,000 Euros for breaching Art. 5 (1) b) GDPR - Non-compliance with general data processing principles
HealthEngine fined for sharing patient data without consent and skewing its reviews
Police Officer fined 48 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Party of the Socialists of Catalonia fined 5,000 Euros for breaching Art. 5 (1) b) GDPR - Non-compliance with general data processing principles
Tusla Child and Family Agency fined 85,000 Euros for breaching Art. 32 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Community of Baronissi fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Cavauto S.R.L. fined 10,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR - Insufficient legal basis for data processing
Just Landed S.L. fined 3,000 Euros for breaching Art. 13 GDPR - Insufficient fulfilment of information obligations
GTL S.R.L. fined 3,000 Euros for breaching Art. 12 GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
GROW BEATS SL fined 3,000 Euros for breaching Art. 12 GDPR, Art. 13 GDPR, Art. 14 GDPR - Insufficient fulfilment of information obligations
OCC Assesses $80 Million Civil Money Penalty Against Capital One | OCC
Capital One agrees to pay $80M fine over 2019 data breach
School fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Restaurant fined 3,000 Euros for breaching Art. 5 (1) c) GDPR, Art. 12 GDPR, Art. 13 GDPR - Non-compliance with general data processing principles
Acc Consulting Varsinais-Suomi fined 7,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Spartoo fined 250,000 Euros for breaching Art. 5 (1) GDPR, Art. 13 GDPR, Art. 14 GDPR - Non-compliance with general data processing principles
Supermarket fined 1,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
National Institute for Social Security - Department of the Province of Brescia fined 5,000 Euros for breaching Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Mapei S.p.A. fined 15,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient legal basis for data processing
Vodafone España, SAU fined 60,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Twitter warns investors of possible fine from FTC consent order probe
Tour & People Max S.L. fined 1,500 Euros for breaching Art. 21 GDPR - Insufficient fulfilment of data subjects rights
Vodafone España SAU fined 45,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Community of Manduria fined 2000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Region of Campania fined 4,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Community of San Giorgio Jonico fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
Communal political association fined 3,000 Euros for breaching Art. 5 GDPR, Art. 6 GDPR, Art. 14 GDPR - Insufficient legal basis for data processing
Employer fined 1,700 Euros for breaching Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR - Insufficient fulfilment of data subjects rights