Poland's Personal Data Protection Office has fined retail website Morele.net PLN$2.8 million for lacking proper data security under the EU General Data Protection Regulation. Morele's insufficient data protection resulted in a data breach of approximately 2.2 million customers. "There was a lack of appropriate response procedures to deal with the emergence of unusual network traffic," the DPA said while announcing the fine. The breach was mainly comprised of names and surnames, phone numbers, and email and delivery addresses, but 35,000 customers also had contents of their installment loan applications exposed.
Full Story