FL: Malicious intent

+0.5 – The breach was due to an intentional action, e.g. in order to cause problem to the data controller (e.g. demonstrate loss of security) and/or in order to harm the individuals.

  • An employee of a company intentionally shares private data from customers in a social media public site.
  • An employee of a company sells private data from customers to another company.
  • A member of a social network intentionally sends information about other members to their family members in order to harm them.
Last modified: Sunday, 21 February 2021, 12:03 AM