Sign In
  • Best Buys
  • Household Money
  • Banking & Borrowing
  • Mortgages & Home
  • Saving & Making Money
  • Rights, Scams & Politics
  • Motoring & Travel
  • Investing & Pensions
  • Savings & ISAs
  • Features
  • Compare

From Facebook to Marriott: the biggest data breach fines companies have had to pay

The steepest data protection penalties ever
BlueCross BlueShield of Tennessee (BCBST), USA – $1.5 million (£1.15m)
Norwich Union, UK – $1.7 million (£1.3m)
Concentra Health Services, USA – $1.7 million (£1.3m)
Jackson Health System, USA – $2.15 million (£1.6m)
CVS Pharmacy, USA – $2.3 million (£1.8m)
CardioNet, USA – $2.5 million (£1.9m)
Scottrade, USA – $2.6 million (£2m)
Oregon Health & Science University (OHSU), USA – $2.7 million (£2.1m)
PG&E, USA – $2.7 million (£2.1m)
University of Mississippi Medical Center (UMMC), USA – $2.8 million (£2.2m)
Cottage Health, USA – $3 million (£2.3m)
Touchstone Medical Imaging, USA – $3 million (£2.3m)
University of Rochester Medical Center, USA – $3 million (£2.3m)
Fresenius Medical Care North America (FMCNA), USA – $3.5 million (£2.7m)
TerraCom and YourTel, USA – $3.5 million (£2.7m)
HSBC, UK – $4 million (£3.1m)
The University of Texas MD Anderson Cancer Center, USA – $4.3 million (£3.3m)
New York-Presbyterian Hospital and Columbia University, USA – $4.8 million (£3.7m)
Nationwide Mutual Insurance, USA – $5.5 million (£4.2m)
Advocate Health Care, USA – $5.6 million (£4.3m)
Sigue Global Services, Italy – $6.6 million (£5.1m)
Stanford Hospital & Clinics, USA – $7 million (£5.4m)
1&1 Telecom GmbH, Germany – $10.9 million (£8.3m)
ChoicePoint, USA – $15 million (£11.5m)
Anthem, USA – $16 million (£12.2m)
Target, USA – $18.5 million (£14.2m)
Tesco Bank, UK – $20.6 million (£15.8m)
AT&T, USA – $25 million (£19.1m)
British Airways, UK – $26.5 million (£20m)
Comcast, USA – $33 million (£25.3m)
Yahoo, USA – $35 million (£26.8m)
Google, France – $56.4 million (£43.2m)
Marriott, UK – $124.4 million (£95.2m)
Uber, USA – $148 million (£113.2m)
Home Depot, USA – $179 million+ (£137m+)
Equifax, US – up to $700 million (£536m)
Facebook, USA – $5 billion (£3.8bn)
1 of 38
AlexandraPopova/Shutterstock

The steepest data protection penalties ever

In the cyberage, personal data is easier to share than ever, but that also makes it more vulnerable to hackers who want to profit from it. In response, authorities across the world have been cracking down on data breaches. The EU’s General Data Protection Regulation (GDPR) rules allow fines of €20million ($21.9m/ £7m) or 4% of the company’s turnover, while the USA and Canada have tightened regulations, so that a serious hack can cost a company more than some disgruntled customers. From British Airways's record-breaking $230.3 million (£183.4m) fine to the supersized settlement Facebook faces following the Cambridge Analytica scandal, here are the heftiest data breach fines ever...

Gallery view |
List View

Daniel Coughlin

25 November 2020

Features

See more on this topic

Share the love