Skip to content
Enforcement
EN

National Revenue Agency: Insufficient technical and organisational measures to ensure information security

€2,600,000 fine - Data Protection Commision of Bulgaria (KZLD)

€2,600,000 Fine
National Revenue Agency
BULGARIA
Insufficient technical and organisational measures to ensure information security

Content

Leakage of personal data in a hacking attack due to inadequate technical and organisational measures to ensure the protection of information security. It was found that personal data concerning about 6 million persons was illegally accessible.

GDPR Articles: Art. 32 GDPR
Industry: Public Sector and Education