Google Ireland was fined €403 million by Ireland’s Data Protection Commission — not because of a data breach, but because location data was retained longer than necessary, the lawful basis for processing could not be sufficiently demonstrated, and users were not clearly informed how their location data was used to infer interests and personalize advertising.

Attackers exploited a compromised Italian government mailbox to send forged European Investigation Orders to Revolut, leading to the disclosure of sensitive data belonging to around 680 customers. The case shows why trusted domains and certified email alone are not enough — legal requests require independent verification, monitoring and clear approval controls

The Pilot Program for Enhancing Cybersecurity Skills Gaps in Ukraine returns in 2026 at twice the scale, bringing together six Ukrainian universities and two practical training tracks: SOC Analyst and Cyber Threat Intelligence & Incident Response. Students and faculty will gain hands-on cybersecurity experience through bootcamps, CybExer cyber range training, CTF competitions and professional certification, while the developed programs will later be integrated into university curricula.

The Rhysida ransomware attack on Berlin exposed a seven-day gap between data exfiltration and network isolation, followed by the publication of stolen government data after Berlin refused to pay the ransom. The incident highlights critical weaknesses in detection, segmentation, MFA and incident response — and shows why public-sector organisations outside the mandatory NIS2 scope should adopt equivalent security controls voluntarily.

Manchester Airports Group exposed data belonging to 8.7 million customers — much of it retained from Wi-Fi sign-ups and ancillary services. The incident shows how unnecessary data retention can turn low-value information into a high-impact security and compliance risk.

Millions of employee directory records allegedly extracted from major Azure/Entra ID environments show why identity data is far more sensitive than it looks. This case reveals how exposed organisational structures, privileged accounts, and service identities can become powerful tools for targeted phishing, impersonation, and privilege escalation.