#GDPR
All CosmicBytez Labs articles tagged #GDPR, across news, security advisories, how-to guides, and projects.
- News
IQVIA Fined $7.8 Million for Failing to Properly Anonymize Health Data
Italy's GPDP fined IQVIA Solutions Italy €7M ($7.8M) after finding ~1M patients' pseudonymized health records could be re-identified.
- News
Google Fined €403 Million Over Location Data Privacy Violations
Ireland's DPC fined Google €403M ($463M) after finding it failed to meet GDPR transparency requirements across three location-tracking features.
- News
Sweden Fines Miljödata $183,000 Over Breach Affecting 2.2 Million
IMY fines HR software vendor Miljödata $183K after a 2025 ransomware breach exposed 2.2 million Swedish residents' sensitive data.
- News
Google Hit With $463 Million Fine for EU Location Data Rule Breach
Ireland's DPC fined Google €403M ($463M) after finding it unlawfully processed Location History, Web & App Activity, and Location Accuracy data.
- News
Spain's Data Agency Gets First Report of AI-Powered Data Breach
AEPD logs Spain's first breach notification naming an autonomous AI agent, not a human, as the attacker.
- News
Grindr to Pay £26 Million to Settle UK Claims Over HIV Data Sharing
Grindr will pay £26M to settle a UK High Court claim by 12,000 users alleging HIV status and PrEP data was shared with advertisers pre-2020.
- News
French Hospital Fined €500,000 After Breach Exposes Data of 727,000 People
CNIL fined Hôpital privé de la Loire €500K for GDPR failures — no MFA for external doctors and no real-time monitoring — after a teen attacker's breach.
- Security
CVE-2026-75865: WPLP Cookie Consent Plugin Unauthenticated File Upload
A critical flaw in the WPLP Cookie Consent WordPress plugin lets unauthenticated attackers upload arbitrary files, opening a path to remote code execution.
- News
Uber Fined €825 Million by Dutch Regulators Over Automated Driver Account Suspensions
The Dutch DPA fined Uber €825M for GDPR violations after its algorithm suspended driver accounts without meaningful human review or transparent explanation.
- News
French Tax Authority Data Breach Exposes 678,000 Individuals
ZeroBytes hacker breached France's DGFiP via stolen credentials, exfiltrating tax data on 678,000 individuals including income and withholding tax rates.
- News
Pokemon Center Data Breach Exposes Customer Info, Cancels Some Orders
Pokemon Center is notifying UK and Germany customers of a third-party breach at logistics provider CEVA Logistics that exposed personal and order data.
- News
Poland Probes MyDr Healthcare Software Breach Potentially Affecting 19 Million
Polish authorities are investigating a breach at healthcare software firm MyDr that may have exposed personal data of up to 19 million patients.
- News
Valve Notifies Steam Hardware Customers of CEVA Logistics Data Breach
Valve is notifying Steam hardware customers in Europe that hackers stole shipping and personal data after compromising its logistics partner CEVA...
- News
Spain Fines 23andMe Nearly $3 Million for Cybersecurity Failings Enabling 2023 Hack
Spain's data protection agency AEPD has fined 23andMe approximately $3 million for cybersecurity failures that enabled the 2023 credential-stuffing breach...
- News
Lidl Discloses Online Shop Breach After Service Provider Hack
German supermarket giant Lidl has notified customers in Germany, Belgium, and the Netherlands that personal data was stolen following a breach at one of...
- News
Google to Use UK and EU User IP Addresses for Ad Personalization
Starting August 3, 2026, Google will use IP addresses from UK, EEA, and Switzerland users for ad measurement and personalization — a reversal of its...
- News
In Other News: Google Security Layoffs, AudiA6 Takedown, $400M Coupang Fine
This week's security roundup covers Google's controversial security team layoffs, Europol's dismantling of the AudiA6 ransomware crypto laundering...
- News
UK Fines Water Supplier $1.3M for Exposing Data of 664K
The UK's Information Commissioner's Office has fined South Staffordshire Water Plc and its parent company £963,900 ($1.3 million) after a cyberattack...
- News
Italian Regulator Fines National Postal Service Orgs $15
Italy's data protection authority fined Poste Italiane €6.6 million and Postepay €5.9 million for illegally processing millions of users' personal data,...
- News
Italian Regulator Fines Financial Giant $36 Million for Data Protection Failures
Italy's data protection authority, the Garante, has fined Intesa Sanpaolo €36 million for serious shortcomings in personal data security, citing...
- News
Dutch Court Threatens xAI with Fines Over Grok's
A Dutch court has ordered Elon Musk's xAI to stop generating nonconsensual nude images via Grok or face fines of €100,000 ($115,000) per day for...