What are some famous GDPR breach examples?

Editorial team Published on
Score: 0/5 (0 votes)

Some of the most famous General Data Protection Regulation (GDPR) breaches and violations involve massive tech giants and household names. Penalties are handed down not just for traditional cybersecurity hacks, but also for mishandling user consent, violating children's privacy, and improperly transferring data across borders.

What is an example of a breach of GDPR?

A GDPR breach is any security incident that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data. Examples range from malicious cyberattacks to simple human errors, which are generally categorized into these specific scenarios:

What is the most famous data breach?

Widely considered one of the biggest data breaches in history, the August 2013 Yahoo incident wasn't disclosed until December 2016. The breach compromised all 3 billion of Yahoo's user accounts.

What companies have breached GDPR?

Top 20 GDPR breach fines

  • Meta Platforms Ireland Ltd. - €1.2bn fine (2023)
  • Amazon Europe - €746m fine (2021)
  • TikTok - €530m fine (2025)
  • Meta - €479m fine (2025)
  • Meta Platforms, Inc. - €405m fine (2022)
  • Meta Platforms Ireland Ltd. - €390m fine (2023)
  • TikTok Ltd - €345m fine (2023)
  • LinkedIn - €310m fine (2024)

What are the top 3 big data privacy risks?

What Are The Top 3 Big Data Privacy Risks?

  • Cyberattacks and hacking.
  • Lack of transparency in data usage.
  • Non-compliance with privacy laws.

Breach of Data - GDPR

24 related questions found

What are the 7 V's of big data?

Many Vs have already been described, but the first seven are usually the same in most of the sources. There are: Volume, Variety, Velocity, Variability, Veracity, Visualization and Value. Allow us to tell you more about them.

What are the top 10 security threats?

10 Types of Threats to Information Security

  • Advanced Persistent Threats. APTs are stealthy cyberattacks designed to gain prolonged access to systems. ...
  • Cryptojacking. ...
  • Distributed Denial-of-Service Attack. ...
  • Insider Threats. ...
  • Malware. ...
  • Man-in-the-Middle Attacks. ...
  • Password Attack. ...
  • Ransomware.

Who was fined $20 million for breaching GDPR?

BRITISH AIRWAYS RECEIVES £20MILLION FINE FROM ICO FOR SECURITY BREACH. On 16th October 2020 the UK Information Commissioner's Office announced that British Airways was to pay £20,000,000 for GDPR violations. This was a significant decrease (90%) of the originally proposed fine of £183,390,000 announced in July 2019.

What is a real life example of a data breach?

Real-life data breaches often involve hackers stealing personal data like social security numbers, passwords, and bank details from company servers. Notable examples include the Yahoo breach (3 billion accounts) (2013-2016), Equifax (147 million people) (2017), and Facebook (533 million users) (2019), highlighting risks from cyberattacks, unpatched software, and misconfigured cloud storage.

What is the biggest GDPR penalty?

The single biggest fine on record: $1,371M (€1.2B) against Meta (Facebook) in 2023, for illegally routing European users' personal data to US servers. Amazon follows at $852.5M (€746M), and TikTok (ByteDance) claimed third place in May 2025 with a $605.6M (€530M) penalty for transferring EU user data to China.

What are 80% of all data breaches caused by?

Approximately 80 percent of cyber breaches occur as a result of human error or the human element.

Who is the #1 hacker in the world?

There is no single universally agreed-upon "#1 hacker" in the world, as hacking spans many different skill sets, motives, and specialties. However, Kevin Mitnick is historically crowned as the "world's most famous hacker" due to his legendary social engineering skills and high-profile exploits in the 1990s.

What is the second largest data breach in history?

Equifax - the second largest data breach in history: 143 million people could be affected. Credit-reporting company Equifax Inc. said Thursday that hackers gained access to some of its systems, compromising the personal information of about 143 million U.S. consumers, according to WSJ.

What are the three biggest data breaches of all time?

The Largest Data Breaches Ever Recorded (Ranked)

  • Mother of All Breaches (MOAB) (2024) Records Exposed: 26 billion. ...
  • CAM4 (2020) Records Exposed: 10.8 billion. ...
  • RockYou2021 (2021) ...
  • 4. Yahoo (2013–2014) ...
  • Aadhaar (India ID Database) (2018) ...
  • 7. Facebook (Meta) (2019/2021) ...
  • Marriott / Starwood (2014–2018) ...
  • LinkedIn (2012)

What is a serious GDPR breach?

A personal data breach is an accidental or unlawful loss, destruction, modification, unauthorised disclosure or access to personal data. It can lead to severe consequences, including legal action, financial loss and reputational damage.

What are the 7 rules of GDPR?

The 7 core principles of the General Data Protection Regulation (GDPR) govern how organizations must process personal data. Outlined in Article 5 of the GDPR, they ensure user information is handled lawfully, securely, and with full transparency.

What are the top 10 security breaches?

What are the largest data breaches in history?

  • The 2025 Credentials Crisis: 16 billion+ records exposed.
  • Yahoo: 3 billion records lost.
  • National Public Data: 2.9 billion records lost.
  • River City Media: 1,. ...
  • Aadhaar: 1.1 billion records lost.
  • Indian Council of Medical Research (ICMR): 815 million records lost.

What is a real world example of confidentiality breach?

Real world breaches confirm that confidentiality violations happen across professional settings and carry serious consequences. 1. An employee posts private emails online by sharing internal communications on public platforms or social media. The emails may contain client names, strategic plans, or personnel matters.

What big companies have had data breaches?

Recent major corporate data breaches include the Instructure (Canvas LMS) attack that compromised 3.65 terabytes of user data, and a breach at NYC Health + Hospitals affecting 1.8 million patients. Other prominent recent incidents include the massive 2024 National Public Data breach and the 2024 Dell breach affecting 49 million customers.

What companies have been fined by GDPR?

20 biggest GDPR fines so far

  • Meta GDPR fine- €1.2 billion. ...
  • Amazon GDPR fine – €746 million. ...
  • Meta GDPR fine – €405 million. ...
  • Meta GDPR fine – €390 million. ...
  • TikTok GDPR fine- €345 million. ...
  • Linkedin GDPR fine – €310 million. ...
  • Uber GDPR fine – €290 million. ...
  • Meta GDPR fine – €265 million.

What is the 72 hour rule for data breach?

By law, you've got to report a personal data breach to the ICO without undue delay (if it meets the threshold for reporting) and within 72 hours. You might end up not needing to report it, but start a log anyway, to record what happened, who is involved and what you're doing about it.

Why was Meta fined 1.2 billion?

This fine, which is the largest GDPR fine ever, was imposed for Meta's transfers of personal data to the U.S. on the basis of standard contractual clauses (SCCs) since 16 July 2020. Furthermore, Meta has been ordered to bring its data transfers into compliance with the GDPR.

What are the top 5 most common cyber threats?

What are the Most Common Cyber Threats Today?

  • Malware Attacks. Malware attacks are another common type of cyber attack that can be very dangerous for businesses. ...
  • SQL Injection Attacks. SQL injection attacks are a type of attack that targets databases. ...
  • Denial of Service Attacks. ...
  • Insider Threats.

What are the 5 C's in security?

In security, the 5 C's typically refer to a widely used framework for building and evaluating a robust cybersecurity and risk management strategy.

What are the 7 human security threats?

Figure 2: Human security

Previously, the 1994 Global Human Development Report had specified that human security includes seven essential dimensions: (i) economic, (ii) food, (iii) health, (iv) environmental, (v) personal, (vi) community and (vii) political.