National Revenue Agency
€2,600,000
Insufficient technical and organisational measures to ensure information security
Date de décision
28 août 2019
Autorité
Data Protection Commision of Bulgaria (KZLD)
BG
Secteur
Public Sector and Education
Pays
BG
Droit
GDPRStatut
FINALDescription
Leakage of personal data in a hacking attack due to inadequate technical and organisational measures to ensure the protection of information security. It was found that personal data concerning about 6 million persons was illegally accessible.
Citations légales
Art. 32
Questions et violations
Insufficient technical and organisational measures to ensure information security