{"id":57991,"date":"2025-01-13T05:27:10","date_gmt":"2025-01-13T05:27:10","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/"},"modified":"2025-01-13T05:27:10","modified_gmt":"2025-01-13T05:27:10","slug":"europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/","title":{"rendered":"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules"},"content":{"rendered":"<p><span class=\"label\">Infosec in brief<\/span> Gravy Analytics, a vendor of location intelligence info for marketers which reached a settlement with US authorities last year over its alleged unlawful sale of location, has reportedly been hacked \u2013 potentially exposing millions of smartphone users.<\/p>\n<p>A trove of Gravy Analytics data <a href=\"https:\/\/www.404media.co\/hackers-claim-massive-breach-of-location-data-giant-threaten-to-leak-data\/\" rel=\"nofollow\">reviewed and verified<\/a> by 404 Media apparently indicates that advertisers are leveraging real-time bidding (RTB) processes to collect user data, which is then sold to brokers like Gravy Analytics and Mobilewalla. Both companies <a href=\"https:\/\/www.theregister.com\/2024\/12\/04\/ftc_data_brokers\/\">settled with the FTC<\/a> in December over claims they bought and sold highly sensitive personal information without consent.<\/p>\n<p>Startlingly, it appears this data collection occurs through advertising ecosystems, allowing brokers to gather location data without direct integration into apps and often bypassing user privacy permissions.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Apps mentioned in various dumps of data linked to the breach include dating platforms like Tinder and Grindr, Candy Crush, and fitness apps like MyFitnessPal. Tumblr, Yahoo! Mail, Microsoft&#8217;s Office365 mobile apps, Flightradar24, religious apps, period tracking apps, and ad-supported VPN services are also mentioned.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xmd=\",fluid,mpu,leaderboard,\" data-lg=\",fluid,mpu,leaderboard,\" data-xlg=\",fluid,billboard,superleaderboard,mpu,leaderboard,\" data-xxlg=\",fluid,billboard,superleaderboard,brandwidth,brandimpact,leaderboard,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<div class=\"adun_eagle_desktop_story_wrapper\">\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xxlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<\/p><\/div>\n<p>Both Android and iOS apps are included in the lists of affected apps.<\/p>\n<h3 class=\"crosshead\">EU court finds EU violated GDPR, demands settlement<\/h3>\n<p>In what appears to be a first, the EU General Court has fined the European Commission for violating its own GDPR data protection regulations by failing to prevent the transfer of a German citizen&#8217;s data to the United States.<\/p>\n<p><a href=\"https:\/\/curia.europa.eu\/jcms\/upload\/docs\/application\/pdf\/2025-01\/cp250001en.pdf\" rel=\"nofollow\">Per<\/a> [PDF] the Court of Justice of the European Union (CJEU), the European Commission&#8217;s Conference on the Future of Europe website apparently allowed users to sign in with their Facebook credentials. When the unnamed German individual signed into the Commission&#8217;s site using his Facebook credentials, he alleged that his data was sent to the US under the control of both Meta and AWS.<\/p>\n<p>While the CJEU dismissed the claims related to AWS, it found that the data transfer to Meta&#8217;s US-based servers breached GDPR rules.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>&#8220;The General Court finds that the Commission committed a sufficiently serious breach of a rule of law that is intended to confer rights on individuals,&#8221; the CJEU said. To resolve the matter, the Commission has been ordered to pay the individual \u20ac400 &#8211; quite the wrist slap.<\/p>\n<div class=\"boxout\" readability=\"14.51343836886\">\n<h3 class=\"crosshead\">Critical vulnerabilities of the week: Time to update Cisco ISE<\/h3>\n<p>Cisco last week <a href=\"https:\/\/www.cisco.com\/c\/en\/us\/support\/docs\/field-notices\/742\/fn74227.html\" rel=\"nofollow\">reported<\/a> a critical security issue with its Identity Services Engine (ISE) stemming from an upcoming change in Microsoft Windows systems. Starting February 11, 2025, Microsoft will enforce stricter certificate mappings to Active Directory to prevent spoofing attacks.<\/p>\n<p>This change could cause older versions of ISE that don&#8217;t support the new certificate requirements to fail during authentication processes. Cisco has released updates that resolve the problem. Time to get patching!<\/p>\n<p>Elsewhere:<\/p>\n<ul>\n<li>CVSS 9.3 &#8211; <a href=\"https:\/\/www.cisa.gov\/news-events\/ics-advisories\/icsa-25-007-02\">CVE-2024-12757<\/a>: Nedap Librix Ecoreader, a tool used in digital twins, is missing authentication for critical functions, allowing for remote code authentication. Nedap Librix did not respond to CISA&#8217;s attempts to coordinate for a fix, so you&#8217;ll need to find another way to mitigate the risk.<\/li>\n<li>CVSS 8.2 &#8211; <a href=\"https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2025-0003\" rel=\"nofollow\">multiple CVEs<\/a>: Security appliance vendor SonicWall has identified multiple vulnerabilities in SonicOS including a bypass hole in its SSL VPN and SSH management interfaces. Patches are available.<\/li>\n<\/ul>\n<\/div>\n<h3 class=\"crosshead\">Hot new ransomware group may be all bark<\/h3>\n<p>A new ransomware group calling itself FunkSec emerged late last year and shot to prominence thanks to claims it had more victims than any other gang, but Check Point security researchers have found <a href=\"https:\/\/blog.checkpoint.com\/research\/meet-funksec-a-new-surprising-ransomware-group-powered-by-ai\/\" rel=\"nofollow\">evidence<\/a> the group might be exaggerating its abilities.<\/p>\n<p>According to Check Point, FunkSec&#8217;s 85 claim of 85 victims in December, and the data it published from them, appears to be at least partially recycled from earlier hacktivism campaigns. Further, analysis of the gang&#8217;s activity suggests they&#8217;re using at least some AI assistance to program malware.<\/p>\n<p>&#8220;The high number of published victims may mask a more modest reality, both in terms of actual victims as well as the group&#8217;s level of expertise,&#8221; Check Point said, adding that FunkSec&#8217;s primary motivation at this point appears to be building a reputation.<\/p>\n<h3 class=\"crosshead\">Hackers steal cannabis customers&#8217; data, really ruin buzz<\/h3>\n<p>Not cool, man: Los Angeles-based cannabis firm Stiiizy <a href=\"https:\/\/www.stiiizy.com\/pages\/notice-of-data-breach\" rel=\"nofollow\">admitted<\/a> last week that customers at several of its retail locations in the Golden State have had their personal data nicked by cybercriminals. The breach occurred between October 10 and November 10, 2024, when cybercriminals compromised the systems of one of Stiiizy&#8217;s point-of-sale (POS) processing vendors.<\/p>\n<p>Stiiizy didn&#8217;t identify the vendor of the POS platform, or the &#8220;organized cybercrime group&#8221; that stole the data, but noted that the incident happened sometime between October and November 2024. According to Stiiizy, the compromised data included personal details from government-issued IDs such as names, addresses, dates of birth, and signature. Retail transaction data also leaked. Not all data types were accessed for every customer.<\/p>\n<p>It was <a href=\"https:\/\/mjbizdaily.com\/cannabis-industry-apparent-target-of-everest-ransomware-security-experts\/\" rel=\"nofollow\">reported<\/a> in November that the Everest ransomware gang was targeting the cannabis industry, though it&#8217;s not clear if that&#8217;s the gang behind this buzz-harshing hack.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" id=\"story_eagle_xsm_sm_md_xmd_lg_xlg\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",mpu,dmpu,\" data-sm=\",mpu,dmpu,\" data-md=\",mpu,dmpu,\" data-xmd=\",mpu,dmpu,\" data-lg=\",mpu,dmpu,\" data-xlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Stiizy retail customers at two San Francisco stores, and one each in Alameda and Modesto are affected, and the company is offering impacted customers 12 months of free credit monitoring services.<\/p>\n<h3 class=\"crosshead\">That CrowdStrike recruitment email you got might have been fake<\/h3>\n<p>CrowdStrike last week <a href=\"https:\/\/www.crowdstrike.com\/en-us\/blog\/recruitment-phishing-scam-imitates-crowdstrike-hiring-process\/\" rel=\"nofollow\">warned<\/a> it has spotted attackers impersonating its recruiters and sending fake job offer emails that suggest downloading and running a fake CRM application that is actually a downloader for the cryptominer XMRig.<\/p>\n<p>&#8220;Those interested in applying for a role at CrowdStrike should navigate to our Careers page to learn about our job openings and begin our official application process,&#8221; the security shop said. &#8220;To verify the authenticity of CrowdStrike recruitment communications, please reach out to recruiting@crowdstrike.com.&#8221; \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2025\/01\/13\/data_broker_hacked\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>PLUS: Data broker leak reveals extent of info trading; Hot new ransomware gang might be all AI, no bark; and more Infosec in brief\u00a0 Gravy Analytics, a vendor of location intelligence info for marketers which reached a settlement with US authorities last year over its alleged unlawful sale of location, has reportedly been hacked \u2013 potentially exposing millions of smartphone users.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-57991","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-13T05:27:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules\",\"datePublished\":\"2025-01-13T05:27:10+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/\"},\"wordCount\":957,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/\",\"name\":\"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2025-01-13T05:27:10+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/","og_locale":"en_US","og_type":"article","og_title":"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2025-01-13T05:27:10+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules","datePublished":"2025-01-13T05:27:10+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/"},"wordCount":957,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/","url":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/","name":"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2025-01-13T05:27:10+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2Z4TD9JK1mWbKOu9PlCiX0QAAAIo&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/europe-coughs-up-e400-to-punter-after-breaking-its-own-gdpr-data-protection-rules\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Europe coughs up \u20ac400 to punter after breaking its own GDPR data protection rules"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57991","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=57991"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/57991\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=57991"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=57991"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=57991"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}