National Revenue Agency
€2,600,000
Insufficient technical and organisational measures to ensure information security
Data della decisione
28 agosto 2019
Autorità
Data Protection Commision of Bulgaria (KZLD)
BG
Settore
Public Sector and Education
Paese
BG
Legge
GDPRStato
FINALDescrizione
Leakage of personal data in a hacking attack due to inadequate technical and organisational measures to ensure the protection of information security. It was found that personal data concerning about 6 million persons was illegally accessible.
Citazioni legali
Art. 32
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security