The French data pro­tec­tion super­vi­so­ry aut­ho­ri­ty, the CNIL, has issued a first Inte­rim review of data pro­tec­tion brea­ches published in accordance with the GDPR:

  • Sin­ce May 25 under Oct. 1, 742 noti­fi­ca­ti­ons of vio­la­ti­ons have been recei­ved, with more than 33 mil­li­on affected.
  • The fol­lo­wing indu­stries were the har­dest hit, in des­cen­ding order: 
    • Hotel indu­stry (becau­se a ser­vice pro­vi­der with indu­stry-wide signi­fi­can­ce was affec­ted by a breach)
    • Sci­ence and technology
    • Trade and mobility
    • IT and communication
    • Finan­ce and insurance
  • The cau­se of the breach was hack­ing, mal­wa­re or phis­hing in more than half of the cases. In second place were unin­ten­tio­nal errors.