FL: Malicious intent
+0.5 – The breach was due to an intentional action, e.g. in order to cause problem to the data controller (e.g. demonstrate loss of security) and/or in order to harm the individuals.
- An employee of a company intentionally shares private data from customers in a social media public site.
- An employee of a company sells private data from customers to another company.
- A member of a social network intentionally sends information about other members to their family members in order to harm them.
Last modified: Sunday, 21 February 2021, 12:03 AM