government healthcare service provider fine education finance social media dark web retail web law enforcement telecoms travel manufacturing operating system legal insurance charity tech gaming publishing transport app phama utilities
story hacked malware ransomware vulnerability unauthorised access phishing accidental disclosure unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP spyware skimming
privacy cyber attack breach notification security flaw legislation poor operations user credentials customer data third party physical security Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

Quebec court approves $200.9M settlement against Desjardins over data breach | Globalnews.ca
Crawfort Pte. Ltd. - summary decision
Audio House Marketing Pte Ltd - summary decision
PDPC | Breach of the Protection Obligation by Lovebonito
Solara medicals settlement
Covenant Care California Reports Data Breach
Capital One Data Breach $190M Class Action Settlement - Top Class Actions
Missouri Health Care Charity Pays Over $8 Million to Resolve Federal Embezzlement, Bribery Investigation
Polish SA: record fine imposed on Fortum Marketing and Sales Polska S.A. for personal data breach | European Data Protection Board
Facebook fined $18.6M over string of 2018 breaches of EU’s GDPR – TechCrunch
Warsaw University of Technology fined
IT Staffing Company Settles Data Breach Class Action
Mobile phone operator slapped with fine over data breach | eKathimerini.com
US healthcare company EyeMed reaches settlement following 2020 data breach | The Daily Swig
The high cost of mishandling data breaches, security reporting for financial services | SC Media
Attorney General James Announces $600,000 Agreement with EyeMed After 2020 Data Breach | New York State Attorney General
FTC settles with data analytics firm after millions of Americans’ mortgage files exposed – TechCrunch
Morgan Stanley to pay $60 million to resolve data security lawsuit | WTVB | 1590 AM · 95.5 FM | The Voice of Branch County
ICO issues 'reprimands' in private to large data lawbreakers • The Register
FBI seized $2.3M from affiliate of REvil, Gandcrab ransomware gangs
Company that dumped private records in public trash is fined
Martin County tax collector still silent amid cyberattack | WPEC
DPC seeking penalty of up to €36m against Facebook
Singapore commision fine decision £10,000
SEC Sanctions Public Company for Misleading Disclosures About Data Breach - Privacy & Information Security Law Blog
UPMC Settles Employee Data Breach Lawsuit for $2.65 Million
France's data protection authority, the Commission nationale de l’informatique et des libertés, announced a 1.75 million euro fine against multinational insurer AG2R La Mondiale for violating data retention provisions under the EU General Data Protection Regulation
The Information Commissioner’s Office (ICO) has fined transgender charity Mermaids £25,000 for failing to keep the personal data of its users secure.
Norwegian DPA: Moss Municipal Council fined | European Data Protection Board
First American Financial Pays Farcical $500K Fine – Krebs on Security
Cedaredge company fined for not securing customer data | Western Colorado | gjsentinel.com
Sanctions against 6 business operators including the Personal Information Commission and Microsoft
The Secret IRS Files Trove of NeverBeforeSeen Records Reveal How the Wealthiest Avoid Income Tax ProPublica
Medhelp will pay 12 million after the 1177 leak
Fin(d)ing Locatefamily.com: Dutch DPA imposes €525,000 fine for not having a GDPR representative
(Peachstate Pays $25,000 to Settle Potential HIPAA violation
City pays $350,000 after suing “hackers” for opening Dropbox link it sent them | Ars Technica
Dutch privacy watchdog fines Booking.com €475K – POLITICO
Restaurant fined 2000 Euros for breaching Art. 5 (1) c) GDPR - Non-compliance with general data processing principles
Hamburger Volksbank eG fined Unknown Euros for breaching Art. 21 GDPR - Insufficient fulfilment of data subjects rights