National Revenue Agency
€2,600,000
Insufficient technical and organisational measures to ensure information security
Decision Date
August 28, 2019
Authority
Data Protection Commision of Bulgaria (KZLD)
BG
Sector
Public Sector and Education
Country
BG
Law
GDPRStatus
FINALDescription
Leakage of personal data in a hacking attack due to inadequate technical and organisational measures to ensure the protection of information security. It was found that personal data concerning about 6 million persons was illegally accessible.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security