gdpr

France's national identity document agency confirmed hackers breached its portal and stole data on up to 12 million citizens, while the threat actor claims 19 million records are for sale.

Hackers accessed names, addresses, bank details, and dates of birth of roughly one million Basic-Fit members before monitoring systems cut off the intrusion.

Italy's data protection authority hit the country's largest bank with two separate fines totaling nearly 50 million euros for an insider data breach and unlawful customer profiling.

Attackers stole 15.8 million patient files, including doctors' notes with HIV status and sexual orientation, from a French health-tech vendor already fined for mishandling medical data.

Amazon launched its AWS European Sovereign Cloud in Brandenburg, Germany in January 2026 with €7.8 billion in investment and ~90 services, but legal experts warn the U.S. CLOUD Act may undermine its core sovereignty guarantees.

The EU Commission's Digital Omnibus proposes narrowing GDPR's personal data definition and delaying AI Act high-risk rules by 16 months. Official data protection authorities and privacy groups are opposing the changes.