Computer attack on one of the largest fast-food chains in Romania: What personal data were accessed and what fine the company received
Fast food / Photo: Draghicich / Dreamstime.com
The Premier Restaurants Romania company, which operates the McDonald's restaurant chain on the Romanian market, was fined for violating the security of personal data, following a computer attack in which the personal data of a significant number of employees were accessed without authorization, the Authority for the Protection of Personal Data announced on Tuesday. The fine was around 8,000 euros and was paid by the company, the authority says.
The sanction came at the end of an investigation completed last year, following a data breach notification submitted by the company that operates the fast-food restaurant chain itself.
During the investigation, it was found that, following a computer attack on the computer application owned by the operator, personal data was accessed.
“This situation led to unauthorized access to personal data belonging to a significant number of data subjects (employees of the operator), such as: name, surname, date of birth, e-mail address, position”, the authority's statement reads.
At the same time, during the investigation, it was found that the operator did not implement adequate technical and organizational measures in order to ensure a level of security corresponding to the risk presented by processing, generated in particular by unauthorized access to processed personal data, including the ability to ensure the confidentiality, integrity, availability and continuous resistance of processing systems and services.
Also, the operator did not make sure that it uses only authorized persons who offer sufficient guarantees for the implementation of appropriate technical and organizational measures, in relation to the provisions of art. 28 para. (1) of Regulation (EU) 679/2016.
Thus, the operator was fined for violating the provisions of art. 32 para. (1) lit. b) and para. (2) in conjunction with art. 28 para. (1) of Regulation (EU) 679/2016.
The operator paid the contravention fine applied, the authority also stated.
Premier Restaurants Romania operates 114 McDonald's restaurants in 34 cities in Romania. The company has more than 7,000 employees.
Photo: Draghicich / Dreamstime.com
