I remember this case in France: https://www.lemonde.fr/societe/article/2019/06/18/la-cnil-inflige-400-000-euros-d-amende-a-l-administrateur-de-biens-sergic_5478

I remember this case in France: https://www.lemonde.fr/societe/article/2019/06/18/la-cnil-inflige-400-000-euros-d-amende-a-l-administrateur-de-biens-sergic_5478044_3224.html https://www.lemonde.fr/societe/article/2019/06/18/la-cnil-in... A GDPR related 400 000€ fine because a company was storing confidential data without authentication using sequential IDs, _and_ they didn’t care when they were warned about the issue.