Tag: gdpr
142 articles
UK Police Face Data Watchdog Action Over Unchecked Use of Retail Crime Platform
The UK police are in hot water with the data watchdog for recklessly signing up around 500 free accounts on a retail crime platform, Auror, without proper checks or formal approval. This lack of oversight raises serious concerns about data protection and accountability.
Norway Fines Xandr $9.6 Million for Illicit Grindr Data Sharing
Norway's data watchdog has slapped Xandr with a whopping $9.6 million fine for illegally sharing Grindr users' sensitive info, including their sexual orientation, with thousands of companies. The massive penalty reflects the seriousness of the breach, which involved relaying personal data to advertisers without a lawful basis.
Norway Fines Microsoft's Xandr $9.6 Million Over Grindr Data Misuse
Norway's Data Protection Authority slapped Xandr, a Microsoft advertising arm, with a whopping $9.6 million fine for recklessly sharing Grindr user data without consent. The massive penalty reflects the severity of the breach, which put thousands of Norwegian users' sensitive information at risk.
H&M Probes Possible Data Breach by ShinyHunters Group
H&M is investigating claims of a potential data breach after online rumors surfaced, and is working to verify if a cyber attack by the ShinyHunters group has compromised its data. The retailer says it's taking the situation seriously and prioritizing the security of its systems and data.
UK Watchdog Secures AI Firms' Data Protection Pledges
The UK's data watchdog has secured pledges from AI firms to prioritize data protection, reassuring people that their personal info will be safeguarded as AI innovation continues to advance. This move aims to build trust, with the watchdog ensuring companies meet four key tests to guarantee responsible data use.
ASOS Faces Suspected Snowflake Compromise, Urges Customer Caution
ASOS customers received a chilling push notification on October 6 claiming that its Snowflake instance had been fully compromised, with the sender threatening to leak sensitive data unless the company engaged with them. The ominous message, signed 'xuanyewengateway', sparked urgent warnings for customers to exercise caution.
IQVIA Fined $7.8 Million for Lax Health Data Anonymization Practices
Italy just slapped IQVIA with a whopping $7.8 million fine for failing to properly anonymize health data, putting nearly one million patients at risk of being reidentified. The country's Data Protection Authority found that IQVIA's lax practices left sensitive info vulnerable.
UK's ICO Reconstitutes with New Board, HQ Amid Regulatory Overhaul
Britain's data protection watchdog has undergone a major overhaul, rebranding as the Information Commission with a new board and HQ, marking a fresh start for the regulatory body. This change comes as part of a broader modernization effort, aimed at strengthening data protection regulation in the UK.
OnePlus Devices Exposed to Root Exploit via Unpatched Flaws
OnePlus has come under fire for telling a security researcher that revealing details of two major flaws in its OxygenOS phones without permission could lead to legal action, despite confirming the issues in May and promising a fix. The company claims European cybersecurity rules give it the exclusive right to decide when to disclose vulnerabilities.
Sweden Fines Miljödata $183,000 for GDPR Breach Over Inadequate Security
A massive GDPR breach has hit Sweden, exposing sensitive personal records of 2.2 million people after a cyberattack on Miljödata, a widely-used municipal HR and work-environment software provider, on August 25, 2025. The breach led to a hefty $183,000 fine for inadequate security measures.
Google Fined €403 Million for GDPR Violations on Location Data Handling
Google just got slapped with a whopping €403 million fine by Ireland's Data Protection Commission for violating EU data protection rules - specifically mishandling people's location data for nearly two years. The penalty sends a strong message that lax data handling practices won't be tolerated, with the watchdog warning that delayed enforcement can be just as damaging as none at all.
Google Fined $463M for GDPR Violations on Location Data Handling
Google's careless handling of location data has landed it a hefty €403 million fine for GDPR violations, sparking concerns that users may have unknowingly surrendered control over their personal info to influence ad targeting and infer interests.
Google Fined €403m for GDPR Breach on Location Data Handling
The Irish Data Protection Commission has fined Google a whopping €403m for mishandling users' location data, violating the EU's strict General Data Protection Regulation (GDPR) rules. This hefty penalty comes after a two-year investigation into how Google handled location information from 2018 to 2020.
Revolut Breach Exposes Sensitive Data of Customers Worldwide
A cunning email scam has led to a massive data breach at Revolut, exposing sensitive information of customers globally, with the scammer posing as a legitimate government agency to trick the fintech firm into sharing customer data. Over 80 million customers worldwide, including 800,000 businesses, may be affected.
ShinyHunters Breach Exposes 6.4M in McKesson Cyberattack
A massive 6.4 million individuals have been impacted by the McKesson cyberattack, with exposed data including sensitive information like names, email and physical addresses, and more. The breach, leaked by ShinyHunters, affects a wide range of people, from patients and staff to marketing recipients and healthcare providers.
LG Smart TVs Collect Extensive User Data, Researchers Warn
LG smart TVs are collecting extensive user data, including audio recordings even when the voice recognition feature is turned off or the TV is on standby, raising serious concerns about privacy invasion. This alarming discovery has experts warning of an egregious breach of personal data.
Grindr Settles UK Data Privacy Claims for $35.2 Million
Grindr is shelling out $35.2 million to settle a UK lawsuit alleging the company mishandled users' personal data, including sensitive info on HIV status, ethnicity, and more, before 2020. The settlement, reached on September 2, resolves claims that Grindr unlawfully processed and misused private information.
Grindr Settles UK Data Suit for $35 Million Over HIV Status Sharing
Grindr is shelling out $35 million to settle a UK lawsuit that claimed the company shared users' personal info, including their HIV status, with third parties without their consent. The settlement, which doesn't admit any wrongdoing, resolves a class-action suit filed on behalf of over 10,000 users.
French Hospital Breach Fines €500,000 for GDPR Failures
France's data protection authority slapped Hôpital privé de la Loire with a hefty €500,000 fine after a summer 2025 security breach exposed sensitive records of over 727,000 people, revealing major GDPR failures. The fine was issued for breaching obligations under the General Data Protection Regulation, specifically Articles 32 and 34.
Fishbrain Breach Exposes Password Hashes to Cyberattack Risks
Fishbrain has revealed a data breach that exposed password hashes for some users, which may be vulnerable to decoding, putting their accounts at risk of cyberattack. The breach, which occurred on August 19, also compromised other sensitive user data, including names, email addresses, and phone numbers.
UK Tightens Cyber Bill Focus on Users, Not AI Vendors
The UK's Cyber Security Bill is shifting its focus towards users and operational controls, rather than targeting AI vendors, to effectively tackle potential harms and misuse by hostile actors. By doing so, the government aims to take firm action through other channels, such as supporting the AI Security Institute.
Berlin Hit by Rhysida Ransomware, Data Theft Confirmed
Berlin's administrative network has been hit by a massive Rhysida ransomware attack, with hackers claiming to have stolen a whopping 5.79 TB of sensitive data, including 1.44 million files, and are now threatening to publish it unless paid a ransom. The breach exposes a vast array of confidential records, from government and financial data to personal info like names, email addresses, and phone numbers.
Brits Overwhelmingly Reject Government Access to Encrypted Messages
An overwhelming 93% of British adults believe they have a right to keep their online conversations private, with 89% agreeing that their personal messages should be off-limits without a court order.
Meta Overhauls Platforms Amid $18B Youth Safety Settlement
Meta is shelling out a whopping $18 billion to settle allegations that its platforms contributed to a mental health crisis among youth - and as part of the deal, it's making significant changes to its platforms to promote safer online experiences. This massive settlement could be a game-changer for social media, pushing other platforms to follow suit.