government healthcare social media service provider fine education finance dark web law enforcement retail web telecoms phama travel manufacturing operating system charity insurance legal app tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device identity theft website hacked ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption fraud VPN passwords zero day state hacking 3rd parties employee data remote working stolen data

Fourth malware strain discovered in SolarWinds incident | ZDNet
Depop: 'I felt so violated when my account was hacked' - BBC News
Google Cloud: We do use some SolarWinds, but we weren't affected by mega hack | ZDNet
Okanogan Co. government hit with cyber attack, working to restore systems - KXLY
EDPB Publishes Guidelines on Examples regarding Data Breach Notification | Privacy & Information Security Law Blog
Should you make your Strava account private? - Canadian Cycling Magazine
WhatsApp is trying its best to keep users from switching to Signal and Telegram
OpenWRT reports data breach after hacker gained access to forum admin account | ZDNet
A Facebook case in Belgium could open the floodgates for GDPR privacy suits | Fortune
Pitkin County - Notice of Data Privacy Incident
Colorado county data breach exposed COVID-19 case info for 2 months last year 
150,000 Arrest Records Lost in Police Data Accident
Notification of Blackbaud Inc. Data Breach | Ronald McDonald House Charities
Hendrick: Computer network breach compromised some patients' information
FIN11 e-crime group shifted to clop ransomware and big game hunting | SC Media
Home Secretary Priti Patel says engineers working to restore 400,000 wiped police records | UK News | Sky News
Schools on security alert as gardaí probe online class breach - Independent.ie
30 Firms Reprimanded Over Data Privacy Violations in Guangdong
DNA Special: Are your private chats really that private?
Hackers Used Zero-Days to Infect Windows and Android Devices | WIRED
This Week In Security: Ubiquiti, Nissan, Zyxel, And Dovecot | Hackaday
Anwara Sp. z.o.o. fined 4,600 Euros for breaching Art. 31 GDPR, Art. 58 (1) a) GDPR - Insufficient cooperation with supervisory authority
Security Incident Notification on Behalf of NYGÅRD HOLDINGS (USA) LIMITED, NYGARD INC., FASHION VENTURES, INC., NYGARD NY RETAIL, LLC, NYGARD ENTERPRISES LTD., NYGARD PROPERTIES LTD., 4093879 CANADA LTD., 4093887 CANADA LTD., AND NYGARD INTERNATIONAL PARTNERSHIP, in receivership
SEPA systems knocked offline by 'ongoing' ransomware attack
Excellus agrees to pay $5 million to settle charges for breach that impacted 9.3 million patients
Laurentian University Data Breach
Wisconsin Medicaid information accessed by unauthorized individual
ThinkMarkets Sues Former Employee for Data Theft
New Whatsapp privacy policy: Should I be worried? What is Signal and Telegram? | ITV News
Regione Lazio fined 75,000 Euros for breaching Art. 5 (2) GDPR, Art. 28 GDPR - Insufficient data processing agreement
Azienda Usl di Bologna fined 18,000 Euros for breaching Art. 5 (1) f) GDRP, Art. 9 GDPR - Non-compliance with general data processing principles
Poliambulatorio Talenti S.r.l. fined 2000 Euros for breaching Art. 12 (3) GDPR, Art. 15 GDPR - Insufficient fulfilment of data subjects rights
Azienda sanitaria provinciale di Enna fined 30,000 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 9 GDPR - Insufficient legal basis for data processing
Agenzia regionale protezione ambientale Campania (ARPAC) fined 8,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 GDPR - Insufficient technical and organisational measures to ensure information security
Coop Finnmark SA fined 38,600 Euros for breaching Art. 5 (1) a) GDPR, Art. 6 GDPR - Insufficient legal basis for data processing
A security flaw in Ring’s Neighbors app was exposing the precise locations and home addresses of users who had posted to the app
Another hacker attack. They attacked the hospital with long-term patients, the police are investigating the case
Criminals are Bypassing MFA to Access Organisation's Cloud Services
Cloud Attacks Are Bypassing MFA, Feds Warn | Threatpost
Facebook's three-cup trick with WhatsApp data move