Order of Psychologists of Lombardy fined 30,000 € for inadequate data security protection and detection following ransomware attack

The Italian Privacy Guarantor fined the Order of Psychologists of Lombardy €30,000 following a ransomware attack—attributed to the NoEscape group—resulting in unauthorized access, encryption, and exfiltration of highly sensitive personal data (including minors and special-category data), later published on the dark web when no ransom was paid. While data availability and integrity were restored via backups, regulators found the Order lacked adequate security and timely breach-detection measures; the organization has since implemented additional protections.