Bulgaria

National Revenue Agency

2,600,000 €

GDPR enforcement action by Data Protection Commision of Bulgaria (KZLD) on 2019-08-28.

Rank · Sector

of 357 in Public Sector and Education

Rank · Bulgaria

of 31

Rank · All fines

#113

of 3,051

Case details

Authority: Data Protection Commision of Bulgaria (KZLD)
Date: 2019-08-28
Controller / Processor: National Revenue Agency
Sector: Public Sector and Education
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

Leakage of personal data in a hacking attack due to inadequate technical and organisational measures to ensure the protection of information security. It was found that personal data concerning about 6 million persons was illegally accessible.

Open original source Links to the regulator's original publication or another source.