startupcafe.ro/magazinele-auchan-romania-amenda-gd

The National Supervisory Authority for Personal Data Processing fined Auchan Romania €8,000 due to a data breach affecting internal users' personal information. The investigation revealed inadequate security measures that failed to prevent unauthorized access to sensitive data. Personal details such as usernames, names, email addresses, and passwords were compromised. Auchan was found to have not implemented sufficient technical and organizational measures to ensure data security, violating GDPR regulations. In addition to the fine, Auchan must adopt corrective measures to restrict IT equipment access to its internal network only, with external access requiring VPN and multi-factor authentication.