L. Zamenhof University Children's Clinical Hospital in Białystok
€15,600
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
30 de junio de 2025
Autoridad
Polish National Personal Data Protection Office (UODO)
PL
Sector
Health Care
País
PL
Ley
GDPREstado
FINALDescripción
The Polish DPA has imposed a fine of EUR 15,600 on the L. Zamenhof University Children's Clinical Hospital in Białystok. The controller did not implement sufficient technical and organisational measures to ensure information security, resulting in a ramsomeware attack on its IT systems.
Citas legales
Art. 5 (2)Art. 32
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security