Privacy Fines

FBI reports $20.9 billion in cybercrime losses from 1M complaints in 2025, up 26% YoY.

Italian DPA fines Intesa Sanpaolo €31.8M for inadequate safeguards allowing employee unauthorized financial data access.

Italian DPA fines Intesa Sanpaolo €31.8M for data breach affecting 3,500+ customers and delayed notification.

Threat actor selling 1.2M French FICOBA banking records with IBANs, SSNs, and tax IDs from 15+ banks.

Italy's DPA fines Intesa Sanpaolo €31.8M for inadequate security and delayed breach notification.

Spain's AEPD fines Vodafone €200K for SIM-swap fraud enabling unauthorized bank access.

KBank Vietnam breach exposes 10.1M credit records with national IDs, salaries, and credit scores.

Dutch court bans X's Grok from generating non-consensual intimate and CSAM imagery in Netherlands.

Spain's AEPD fines utilities company €220,000 for unlawful direct marketing and lack of legal basis under GDPR.

Italian DPA fines Enel Energia €563,052 for unlawful marketing calls and processor oversight failures.

Spain's AEPD fines Orange Espagne €230K for weak eSIM security enabling identity theft.

AEPD fines Orange España €230K for issuing duplicate eSIM without consent.

CareCloud discloses data breach affecting patient health records after March 16 intrusion.

Romania fines Renault €125K for inadequate data security measures after cyberattack.

LeakBase domain administrator arrested in Taganrog, Russia.

Italy's DPA fines two airlines €1.25M for unlawful employee data sharing during asset sale.

UK ICO fines Reddit £14.5M for unlawful processing of children's personal data.

NyxarGroup leaks 70,000 student records from Chilean university on dark web.

Spanish DPA fines e-commerce company €1.09M for legacy system breach exposing 1M+ records on dark web.

Spanish DPA fines BBVA €100,000 for unlawfully redirecting SEPA payments without consent.

Spanish DPA fines e-commerce company €1.09M for data breach affecting 1M+ records and GDPR violations.

QualDerm Partners reports 3.1M patient records stolen in December 2025 breach.

Threat actors claim expanded BMW breach via IDOR exploit affecting multiple automakers.

Spanish DPA fines e-commerce firm €1.09M for exposed million-record database and GDPR breach notification failures.

Spain's AEPD fines e-commerce firm €1.09M for dark web database breach and delayed notification.

UK ICO fines Reddit £14.5M for unlawful processing of children's personal data without parental consent.

Italian DPA fines bank €17.6M for GDPR violations in customer profiling and account transfers.