Romania

S.C. PRIMONET RO S.R.L.

20,000 €

GDPR enforcement action by Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) on 2025-09-25.

Rank · Sector

#175

of 608 in Industry and Commerce

Rank · Romania

#21

of 292

Rank · All fines

#1,120

of 3,085

Case details

Authority: Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Date: 2025-09-25
Controller / Processor: S.C. PRIMONET RO S.R.L.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) a), b), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Romanian DPA has imposed a fine of EUR 20,000 on S.C. PRIMONET RO S.R.L. The controller failed to implement adequate technical and organisational measures to ensure data security. This resulted in a cyber attack that compromised the bank details of customers and caused financial losses.

Open original source Links to the regulator's original publication or another source.