Orange România SA — Regulatory Disclosure
- Victim: Orange România SA
- Date reported: 2026-07-17
- Country: RO
- Severity: Medium
Romania's data-protection authority ANSPDCP fined Orange România SA for GDPR Art. 25(1) and Art. 32 security failures after a cyberattack on a publicly exposed ticketing platform and a mobile-app synchronization error led to unauthorized access to customers' personal data. Fine: 523.900 lei (100.000 EUR).