Victims of Finland’s largest psychotherapy data breach are seeking higher compensation. In 2020, a hacker stole sensitive information from 40,000 clients of Vastaamo, including patient records, and used it for extortion. While the Finnish government has offered compensation ranging from €500 to €1500, lawyers argue that this is insufficient, given the severe privacy violations the … Read more
Tesla, owned by Elon Musk, confirms that a data breach impacting over 75,000 employees was the result of insider misconduct. The electric car maker states that the breach was initiated by two former employees who leaked personal information of more than 75,000 individuals to a foreign media outlet. The breach encompassed personally identifiable details such … Read more
The Irish privacy regulator DPC has imposed a GDPR fine of 265 million euros, around 0.5 per leaked dataset, on Meta for a major data breach at Facebook that left the data of 533 million users on the street. Last year, Ireland’s data protection authority launched an investigation after media reported about a dataset of … Read more
Someone is allegedly selling up-to-date mobile phone numbers of nearly 500 million WhatsApp users. A data sample investigated by Cybernews likely confirms this to be true.
Observer: “Probably to avoid answering questions about Facebook’s cover-up of the Cambridge Analytica data breach Facebook has settled for an undisclosed sum this case just days away from Mark Zuckerberg being cross-examined under oath for six hours.”
Sixty percent of breaches have resulted in companies recouping the cost of fines, clean-up, and technological improvements by increasing prices, essentially making consumers pay for breaches and companies’ lack of preparedness, according to the “Cost of Data Breach Report 2022”.
Telecom provider T-Mobile has reached a settlement in the United States with the victims of a major data breach that occurred last year in which the personal data of 79 million current and former American customers was stolen. This included names, dates of birth, social security number and driver’s license information, as well as telephone … Read more
The processing of location data is unnecessary, such as Windows 10’s location setting being automatically enabled violates the “data protection by default” requirement under Article 25(2) GDPR. The DPA noted that the principle of “data protection by default” requires that the controller, when using third-party software or firmware, ensures that functions for which there is … Read more
The America’s leading not-for-profit health plans and health care provider Kaiser Permanente,, has recently disclosed a data breach that exposed the health information of more than 69,000 individuals. An attacker accessed an employee’s email account containing patients’ protected health information (PHI) which included the patients’ first and last names, medical record numbers, dates of service … Read more
Organizations often ask how much chance they have on data protection fines and how much financial reserve they should make for that. Unit 27 June EDPB guidelines on calculating GDPR fines are released for public consultation. Interesting is to have a look at the example for mitigating and aggravating factors that could influence the height … Read more