- Enforcing jurisdiction
- Bulgaria · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Bulgarian Post EAD – €500,000 Fine (Bulgaria, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Bulgarian Post EAD was fined EUR 500,000 after a hacking attack exposed personal data due to inadequate security measures. The Bulgarian data protection authority found that the company failed to protect its databases properly. This case underscores the need for businesses to invest in strong data security to prevent breaches.
What happened
Bulgarian Post EAD suffered a hacking attack that compromised its databases containing personal data.
Who was affected
Individuals whose personal data was stored in the compromised databases of Bulgarian Post EAD.
What the authority found
The authority ruled that Bulgarian Post EAD did not implement sufficient technical and organizational measures to protect personal data, leading to the breach.
Why this matters
This ruling serves as a wake-up call for companies to prioritize data security measures. Organizations must ensure they have robust protections in place to safeguard personal information from cyber threats.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 6 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Bulgarian DPA has imposed a fine of EUR 500,000 on Bulgarian Posts EAD. The controller had suffered a hacking attack, during which the attackers managed to access the controller's databases. During its investigation, the DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data in order to avoid a data breach.
Related Enforcement Actions (0)
No other enforcement actions found for Bulgarian Post EAD in BG
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 May 2022
Authority
Commission for Personal Data Protection
Fine Amount
€500,000
About this data
Cite as: Cookie Fines. Bulgarian Post EAD - Bulgaria (2022). Retrieved from cookiefines.eu
Last updated: