government
healthcare
social media
service provider
fine
education
finance
law enforcement
dark web
retail
web
telecoms
phama
travel
manufacturing
charity
insurance
operating system
app
legal
tech
gaming
publishing
transport
utilities
story
hacked
malware
unauthorised access
ransomware
vulnerability
accidental disclosure
phishing
unsecured database
poor security
insider threat
unsecured server
hacked email
lost device
identity theft
website hacked
ddos
stolen documents
Trojans
financial
inside job
spear phishing
RDP
skimming
spyware
cyber attack
privacy
breach notification
security flaw
legislation
poor operations
user credentials
physical security
customer data
third party
Cryptocurrency
enforcement
email hacked
insecure storage
court action
encryption
VPN
fraud
zero day
passwords
3rd parties
state hacking
employee data
remote working
stolen data
Unsecured Azure blob exposed 500,000+ highly confidential docs from UK firm's CRM customers • The Register
CafePress Reaches $2M Settlement With States Over Data Breach | Connecticut Law Tribune
Maintaining privilege over forensic data-breach reports | Thompson Coburn LLP - JDSupra
Ordine degli Assistenti Sociali della Regione Lazio fined 2000 Euros for breaching Art. 12 (3), (4) GDPR - Insufficient fulfilment of data subjects rights
Comune di Luino fined 10,000 Euros for breaching Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR, Art. 37 (1) a) GDPR, Art. 37 (7) GDPR - Non-compliance with general data processing principles
Comune di Santo Stefano Belbo fined 4,000 Euros for breaching Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e) GDPR, Art. 6 (2) GDPR, Art. 6 (3) b) GDPR - Non-compliance with general data processing principles
University College Dublin fined 70,000 Euros for breaching Art. 5 (1) e), f) GDPR, Art. 32 (1) GDPR, Art. 33 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Azienda Unità Sanitaria Locale Toscana Sud Est fined 100,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 28 GDPR, Art. 30 GDPR, Art. 32 GDPR, Art. 35 GDPR - Non-compliance with general data processing principles
Miropass S.r.l. fined 40,000 Euros for breaching Art. 5 (1) a), e) GDPR, Art. 6 GDPR, Art. 9 GDPR, Art. 28 GDPR - Insufficient legal basis for data processing
Roma Capitale (Rome Municipality) fined 500,000 Euros for breaching Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 28 (2), (3) GDPR, Art. 32 GDPR - Non-compliance with general data processing principles
ID Finance Poland Sp. z o.o. fined 235,300 Euros for breaching Art. 5 (1) f) GDPR, Art. 25 (1) GDPR, Art. 32 (1) b), d), (2) GDPR - Insufficient technical and organisational measures to ensure information security
Doctor fined 6,000 Euros for breaching Art. 32 GDPR, Art. 33 GDPR - Insufficient technical and organisational measures to ensure information security
IndiGo Says Some Data May be Compromised in Server Breach
The pharmaceutical group Fareva victim of a cyber attack
Microsoft says it found malicious software in its systems | Reuters
Iranian nation-state hackers linked to Pay2Key ransomware
Nuclear weapons agency breached amid massive cyber onslaught - POLITICO
Ransomware masquerades as mobile version of Cyberpunk 2077
Cyber attack in Évreux: the services of the City and the agglomeration paralyzed
Unknown fined 97,150 Euros for breaching Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 9 (1) GDPR, Art. 12 GDPR - Insufficient legal basis for data processing
Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) fined 55,400 Euros for breaching Art. 25 (1), (2) GDPR, Art. 32 (1) b) GDPR, Art. 34 (1) GDPR - Insufficient technical and organisational measures to ensure information security
Unknown fined 1,940 Euros for breaching Art. 5 (1) b), c) GDPR, Art. 13 (1) GDPR - Insufficient fulfilment of information obligations
Hackers used SolarWinds' dominance against it in sprawling spy campaign | Reuters
Dutch Hacker Who Claimed To Access Trumps Twitter Account Will Walk Free After Police Investigation
Seine-Saint-Denis. Puppet in turn victim of a cyberattack
Company that Provides Travel Emergency Services Settles FTC Allegations it Failed to Secure Sensitive Consumer Data | Federal Trade Commission
MEDNAX Services, Inc. - Breach notification
NEXA Mortgage sued over broker's alleged data theft - HousingWire
The California Privacy Rights Act Goes into Effect | Byte Back
Long Island Jewish school’s website hacked with Nazi images, slurs | Fox News
Online Services fined 10,000 Euros for breaching Art. 13 GDPR, Art. 8 (1) GDPR, Art. 6 (1) a) GDPR - Insufficient fulfilment of information obligations
Uppsalahem AB fined 29,500 Euros for breaching Art. 5 GDPR,
Art. 6 (1) f) GDPR - Insufficient legal basis for data processing
Twitter International Company fined 450,000 Euros for breaching Art. 33 (1), (5) GDPR - Insufficient fulfilment of data breach notification obligations
Passwords are terrible for security, and AI can help
Court denies bail for two Malaysians facing US cybercrime charges, pending extradition | The Star
Promutuel Assurance's IT systems disabled by cyberattack | Insurance Business
Huber & Suhner victim of cyber attack, production stands still
Decision 01/2020 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding Twitter International Company under Article 65(1)(a) GDPR | European Data Protection Board
Data breach at Desjardins caused by series of gaps, privacy watchdog says | Globalnews.ca
Virgin Mobile Polska fined 443,000 Euros for breaching Art. 5 (1) f), (2) GDPR,
Art. 25 (1) GDPR,
Art. 32 (1) b), d), (2) GDPR - Insufficient technical and organisational measures to ensure information security
