government healthcare social media service provider fine education finance law enforcement dark web retail web telecoms phama travel manufacturing charity insurance operating system app legal tech gaming publishing transport utilities
story hacked malware unauthorised access ransomware vulnerability accidental disclosure phishing unsecured database poor security insider threat unsecured server hacked email lost device website hacked identity theft ddos stolen documents Trojans financial inside job spear phishing RDP skimming spyware
cyber attack privacy breach notification security flaw legislation poor operations user credentials physical security customer data third party Cryptocurrency enforcement email hacked insecure storage court action encryption VPN fraud passwords zero day 3rd parties state hacking employee data remote working stolen data

iTWire - Auto services firm Inchcape hit by Windows Ransomexx ransomware
Regulatory Crackdown on Ransomware | The Capital Commitment
Spotify notifies customers of breach, files under CCPA | SC Media
PIPEDA Report of Findings #2020-005: Investigation into Desjardins’ compliance with PIPEDA following a breach of personal information between 2017 and 2019 - Office of the Privacy Commissioner of Canada
Norwegian Cruise Company Hurtigruten Experiences Cyber Attack | Hospitality Ireland
Great Neck Yeshiva HS Site Hacked, Anti-Semitic Propaganda Posted | Great Neck, NY Patch
Cyberattack hits Israeli companies, with Iran reportedly the likely culprit | The Times of Israel
Major leak 'exposes' members and 'lifts the lid' on the Chinese Communist Party | Sky News Australia
IT company SolarWinds says it may have been hit in 'highly sophisticated' hack | Reuters
Intel's Habana Labs hacked by Pay2Key ransomware, data stolen
Data breach affects more than half of East Devon Council - BBC News
Umeå University fined 54,000 Euros for breaching Art. 5 (1) f) GDPR, Art. 32 (1), (2) GDPR - Insufficient technical and organisational measures to ensure information security
Banco Bilbao Vizcaya Argentaria, S.A. fined 5,000,000 Euros for breaching Art. 6 GDPR, Art. 13 GDPR - Insufficient fulfilment of information obligations
SISD's internal computer network taken down due to virus - KVIA
Palermo, cyber attack on Amg Energia systems
Marieville - The City victim of a cyberattack
To Report or Not Report Health Care Data Breaches | AJMC
Notice of Data Privacy Event | Konikoff Dental Associates Harbour View
Data breach hoax used to hijack cryptocurrency wallets | TechRadar
Jersey City utilities agency investigating ransomware attack that blocked access to ‘vital’ data - nj.com
Chinese hackers suspected of attacking government agencies in Mongolia
State DMV warns of phishing scam texts asking for personal information
California Consumer Privacy Act (CCPA) Current Rulemaking Activities | State of California - Department of Justice - Office of the Attorney General
Budapesti Műszaki és Gazdaságtudományi Egyetem (Budapest University of Technology and Economics) fined 22,200 Euros for breaching Art. 5 (1) a), b), c) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR, Art. 12 GDPR, Art. 13 GDPR - Insufficient legal basis for data processing
Borjamotor, S.A. fined 4,000 Euros for breaching Art. 7 GDPR - Insufficient legal basis for data processing
DoppelPaymer Ransomeare attached on critical infrastructure
Payment Processing Giant TSYS: Ransomware Incident “Immaterial” to Company — Krebs on Security
Ransomware : Ragnar Locker revendique une cyberattaque contre Dassault Falcon Jet Corp.
Michael Weinig AG in Tauberbischofsheim fell victim to an "organized cyber attack" over the weekend.
Smart Cities Sp. z o.o. fined 2,850 Euros for breaching Art. 31 GDPR, Art. 58 GDPR - Insufficient cooperation with supervisory authority
TUiR Warta S.A. fined 18,850 Euros for breaching Art. 33 (1) GDPR, Art. 34 (1) GDPR - Insufficient fulfilment of data breach notification obligations
Unknown fined 10,000 Euros for breaching Art. 5 (1) f) GDPR - Non-compliance with general data processing principles
Xfera Moviles S.A. fined 40,000 Euros for breaching Art. 6 (1) GDPR - Insufficient legal basis for data processing
Independence, Mo., Recovering After Ransomware Attack
NetGain takes data centers offline following ransomware attack - DCD
Former Cisco engineer gets two years in prison for Webex Teams hack
A dying man, a therapist and the ransom raid that shook the world | WIRED UK
Bitter war of words erupts between UK cops and web security expert over alleged flaws in Cyberalarm monitoring tool • The Register
LG U+ fined as a third party downloads and sells customer data
Cyberattack in Europe: Documents related to Pfizer / BioNTech vaccine hacked