What is the biggest data breach fine?

Asked by: Sim Veum DDS  |  Last update: July 4, 2025
Score: 4.8/5 (19 votes)

Here are the biggest fines and penalties assessed for data breaches or non-compliance with security and privacy laws.
  • Meta (Facebook) : $1.3 Billion. ...
  • Didi Global: $1.19 billion. ...
  • Amazon: $877 million. ...
  • Equifax: (At least) $575 Million. ...
  • Meta (Facebook, Instagram): $ 413 million. ...
  • Instagram: $403 million.

What is the maximum fine for a data breach?

The EU GDPR sets a maximum fine of €20 million (about £18 million) or 4% of annual global turnover – whichever is greater – for infringements.

What is the biggest data breach settlement?

Meta's $1.4 billion settlement with the Texas Attorney General for unlawful collection of biometric data in violation of the Texas Capture or Use of Biometric Identifier Act and The Deceptive Trade Practices Act (largest ever privacy settlement in the U.S.).

How much compensation can you get for a data breach?

How much compensation can I get for a data breach? It depends on many factors and typically ranges from $100 to $750 per person (in some severe cases it can go up to $5,000). California and few other states allow claims for emotional distress without any economic harm.

How much will each person get from Equifax settlement?

In 2022, Equifax offered affected Americans $125 or 10 years of free credit monitoring, although some customers reported receiving less than their share.

Top 5 Biggest Data Breaches in Australia | NordVPN

24 related questions found

How long does data breach compensation take?

In reality, how long a data breach claim takes simply comes down to the circumstances of the case. Some cases could be resolved in a few months, whereas others may end up being pursued for several years.

Has anyone received money from Equifax settlement 2024?

Important Settlement Update

The settlement administrator has been sending out payments for out-of-pocket losses, time spent claims, and other cash benefits. In November 2024, the settlement administrator will be sending prepaid cards with additional payments to those who previously received a payment.

What are the damages for data breach lawsuit?

Data breach lawsuits

Plaintiffs typically seek damages for unauthorized charges, damage to credit, cost of credit monitoring, cost of replacement credit cards, time and expenses incurred to investigate, and emotional distress.

What is the penalty for data breach?

The penalty for failing to undertake reasonable security safeguards to prevent personal data breach is ₹250 Crores per instance of breach. This is the highest penalty envisaged in the DPDP Act.

What is the highest GDPR fine ever?

1. Meta GDPR fine- €1.2 billion. In May 2023, in a groundbreaking decision in the past five years of GDPR enforcement, the Irish Data Protection Commission (DPC) imposed a historic fine of €1.2 billion on US tech giant Meta.

What is a serious data breach?

“A personal data breach may, if not addressed in an appropriate and timely manner, result in physical, material or non-material damage to natural persons such as loss of control over their personal data or limitation of their rights, discrimination, identity theft or fraud, financial loss, unauthorised reversal of ...

What is the fine for data breach in the US?

The VCDPA provides for civil penalties of up to USD 7,500 per each violation and injunctive relief. The CPA provides for civil penalties of up to USD 20,000 per violation and injunctive relief. Violations of HIPAA can include criminal penalties, including up to ten years imprisonment in certain cases.

What is the maximum fine for a serious data breach?

For serious breaches of the data protection principles, we have the power to issue fines of up to £17.5 million or 4% of your annual worldwide turnover, whichever is higher. In line with our regulatory action policy, we take a risk-based approach to enforcement.

Can you get money for a data breach?

Anyone, whose personal information was compromised, leaked, or mis-used as a result of a data breach incident. You can make a data breach claim for compensation even if you haven't suffered any loss (e.g. out of pocket expenses or emotional distress).

How much are data breach lawsuits worth?

Thus far, 2024 has been a banner year, featuring the first, second, and sixth largest data breach related securities class action settlements of all time, totaling $560 million. These cases involved alleged failures to disclose data breaches or material aspects relating to how customer data is secured.

Can I sue because of a data breach?

Anyone who has been affected by a data breach may have the right to file a lawsuit, including individuals, businesses, or organizations that have suffered harm due to the breach.

How much did people get from Equifax settlement?

The settlement with the Consumer Financial Protection Bureau, the Federal Trade Commission, 48 states, the District of Columbia, and Puerto Rico would provide up to $425 million in monetary relief to consumers, a $100 million civil money penalty, and other relief.

Has anyone received money from Equifax breach?

Status of financial reimbursement

Cash reimbursements have been sent to people who submitted requests for payment. Under the Equifax Data Breach Order, leftover funds are used to reimburse people who have valid claims. If you submitted a valid claim, you could receive an extra payment.

How much will each person get from Capital One settlement?

A class-action lawsuit brought against Capital One Bank by American consumers was settled in 2021 with the bank agreeing to pay $190 million. The maximum amount of compensation for each claimant's lost money is $25,000.

How long does a data breach settlement take?

A claim for data breach compensation could take anywhere from a few months to a few years to resolve. If the surrounding circumstances are relatively clear cut and the organisation accepts a settlement, you can expect the process to proceed much faster.

What should you do immediately after a data breach?

Here's What You Should Do After a Data Breach
  • Find Out What Data Was Compromised.
  • Secure Your Accounts.
  • Monitor Your Financial Accounts and Credit Reports.
  • Initiate a Fraud Alert.
  • Freeze or Lock Your Credit File.
  • Look Out for Signs of Scams.

What is compensation for distress and inconvenience?

Is an award for inconvenience and distress a fine or a punishment for the company for getting something wrong? No, it's not a fine or a punishment. Instead, an award for inconvenience and distress is a way for the adjudicator to recognise that something went wrong and the company should have acted differently.