CyphrQMedibank Data Breach 2022: What Happened and the OAIC's Court Case
How the 2022 Medibank data breach happened, who was affected, what the OAIC alleges in its Federal Court case, and what security teams should check.
Data privacy breaches
Breaches that ended in a regulator's finding, fine or settlement over personal data.
10 articles
Meta's €1.2 Billion GDPR Fine Explained: DPC, EDPB and US Data Transfers
Meta's 2023 €1.2bn GDPR fine: what Ireland's DPC decided, why the EDPB stepped in, and what it means for EU-US data transfers.
Optus Data Breach Penalty: The OAIC and ACMA Court Cases Explained
What Optus said about its 2022 cyberattack, what the OAIC and ACMA allege in Federal Court, the penalty limits, and what security teams should check.
VentureRock 2023 ADGM Data Breach Case: One Hijacked Mailbox, No Fine
How a hijacked Microsoft 365 mailbox led ADGM's data regulator to reprimand VentureRock in 2023, why there was no fine, and what to check in your estate.
Equifax Data Breach Settlement: What Happened and What It Cost
The 2017 Equifax breach exposed data on about 147 million people. How attackers got in, what the 2019 settlement cost, and what to check in your estate.
INSS Data Breach: Why Brazil's ANPD Sanctioned It Without a Fine
In 2022, valid credentials ran 90M+ queries on Brazil's INSS benefits system. What ANPD found, the sanction, and what to check in your own estate.
South Africa Justice Department Ransomware and the R5m POPIA Fine
Ransomware hit South Africa's Justice Department in 2021. The regulator found lapsed security licences and later issued a R5 million POPIA fine.
SK Telecom USIM Breach 2025: What Was Taken and the PIPC Fine
What was stolen in SK Telecom's 2025 USIM breach, how many subscribers were affected, what Korea's regulators found, and the PIPC's 134.8 billion won fine.
SingHealth Data Breach 2018: How It Happened and What PDPC Fined
The 2018 SingHealth data breach hit about 1.5 million patients. How attackers got in, the S$1 million PDPC penalties, and lessons for IT teams.
British Airways Data Breach Fine: What Happened and Why It Cost £20m
How attackers skimmed British Airways card data in 2018, why the ICO fined £20m not £183.39m, and the controls the ICO says were missing.