Realmedia Network SA: Insufficient technical and organisational measures to ensure information security

The Romanian DPA has fined Realmedia Network SA EUR 8,000. The company had suffered security breaches on a website it operates. This allowed it to leak and access unauthorized data. The data involved included surnames, first names, telephone numbers, e-mail addresses, postal addresses, signatures, copies of ID cards, bank data and information from land register extracts of the data subjects. A total of 194,309 people were affected by the security incident. The DPA found that the company had failed to take adequate technical and organizational measures to ensure a level of data security appropriate to the processing risk.

GDPR Articles: Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Industry: Media, Telecoms and Broadcasting