government healthcare social media service provider fine education finance dark web retail law enforcement web telecoms travel manufacturing phama operating system insurance legal charity app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

Nintendo breached
Drupal breached
Yahoo Japan breached
Washington State court system breached
National Diagnostic Imaging US Teleradiology Company
Evernote breached
Blizzard breached
KT Corp. breached
Formspring breached
Office of the Texas Attorney General breached
Emory Healthcare breached
Three Iranian banks breached
Memorial Healthcare System breached
Medicaid breached
California Department of Child Support Services breached
Global Payments breached
China Software Developer Network breached
Bank of America Responds to Breach - BankInfoSecurity
Zappos breached
Bank of America loses $10 million in data breach -
Michigan Legislature - IDENTITY THEFT PROTECTION ACT (Section 445.72)
UMC admits to prolonged patient privacy leak
Missouri Rbreach of security RSMo Section 407.1500 (Mo. Rev. Stat. § 407.1500)
Alaska Personal Information Protection Act - Consumer Protection Laws
Programmer who stole drive containing 1 million bank records gets 42 months
Dubai Municipality Wikipedia
MTAS system 'catastrophic' - junior doctors online recruitment scandal - Channel 4 News
Georgia Personal Identity Protection Act. (OCGA § 10-1-910)
Australian National University hit by huge data breach
Protecting Children’s Privacy Under COPPA: A Survey on Compliance
D.C. Law Library - § 28–3852. Notification of security breach.
Opening a Can of Whoop Ads Detecting and Disrupting a Malvertising Campaign Distributing Backdoors Mandiant
Hospital systems slowly coming back online after October cyberattack
Unknown fined 118 Euros for breaching Art. 6 GDPR - Insufficient legal basis for data processing
Social Insurance Agency fined 50,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Madrileña Red de Gas fined 12,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Slovak Telekom fined 40,000 Euros for breaching Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Unknown fined Unknown Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Restaurant (SANTI 3000, S.L.) fined 9,600 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
ENDESA (energy supplyer) fined 60,000 Euros for breaching Art. 5 (1) f) GDPR - Insufficient legal basis for data processing