ANSPDCP (Romania) - ANSPDCP (Romania) - Fine against Poliserv JG (PJG) SRL
Romanian DPA fines car dealer €3,000 for data security failures after phishing attack.
The Romanian Data Protection Authority (ANSPDCP) has fined Poliserv JG (PJG) SRL, a car dealership, €3,000 (RON 15,728) for failing to implement adequate technical and organizational measures to secure personal data processing. The fine was issued after a phishing attack compromised an administrator account, leading to unauthorized access to customer data, violating Article 32 of the GDPR. The DPA also mandated regular phishing awareness training and verification of data protection procedures.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ANSPDCP?
Get an email when a new story names ANSPDCP, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA phishing attack successfully compromised an administrator account at Poliserv JG (PJG) SRL, exposing customer personal data and triggering a €3,000 GDPR fine from Romania's data protection authority. The root cause was a failure to implement adequate technical and organizational measures, as required by GDPR Article 32, including insufficient phishing awareness training and weak account protection. Administrator accounts are high-value targets and require layered defenses such as multi-factor authentication and regular security training. This case demonstrates that even smaller businesses handling customer data are held to GDPR standards, and negligence in basic security hygiene carries both financial and reputational consequences.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.