Greek privacy regulator fined OTE €3.25 million after subscriber call-data breach

Summary

After investigating the leakage of subscriber call data between 1 and 5 September 2020, the Hellenic Data Protection Authority found that OTE had infringed GDPR Article 32 because of inadequate security measures in infrastructure used in the breach. The authority fined OTE €3.25 million. The same decision separately fined COSMOTE €6 million; that subsidiary fine is not attributed to OTE in this record. Primary source: https://www.dpa.gr/en/enimerwtiko/news/fines-imposed-due-personal-data-breach-and-illegal-data-processing