GRC Report Staff

Coinbase Ireland Fined €3.25 Million After Years of Failures to Safeguard Customer Funds

At its worst in 2024, the shortfall in Coinbase Ireland's customer safeguarding account reached €5.2 million. The company was required to keep enough money in the account to cover its obligations to customers. For at least 18 months, it fell short every day.

Meta Ordered to Pay $25 Billion in New Mexico Facebook Privacy Case

A New Mexico judge has ordered Meta Platforms to pay $25 billion in civil penalties after a jury found that Facebook repeatedly misled consumers about their personal information and the company's handling of harmful content. The judgment, issued Wednesday, is among the largest financial penalties ever imposed on a U.S. corporation.

Norway Reports Record Increase in Data Breaches Linked to Deliberate Cyberattacks

Norway's data protection authority received 282 reports of personal data breaches linked to deliberate cyberattacks in the first half of 2026, up from 103 during the same period last year, as intrusions at shared technology suppliers exposed information belonging to multiple organizations.

European Commission Investigates Booking.com Over Suspected DSA Violations

The European Commission has opened a formal investigation into Booking.com over concerns that fraudulent accommodation listings, phishing scams and undisclosed paid promotions may be exposing travelers to risks the platform has failed to adequately address.

KPMG Survey Finds AI Investment Rising as Companies Struggle to Measure Returns

Companies are preparing to spend an average of $210 million on artificial intelligence over the next 12 months, a 13% increase since the beginning of the year. Yet only 12% consistently measure the value of their AI investments against what they cost, according to a new global survey from KPMG.

UK Privacy Regulator Reprimands Two Welsh Organizations After Ransomware Attack Exposes Children's Data

The UK's Information Commissioner's Office (ICO) reprimanded Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales, known as Data Cymru, on October 20 after finding that both organizations had failed to maintain adequate security controls and oversight of accounts on Data Cymru's network.

ASIC Secures $579 Million in Civil Penalties as Annual Report Details Major Enforcement Cases

Australia's corporate regulator secured approximately $579 million (A$830 million) in court-ordered civil penalties during the 2025–26 financial year, with major cases involving ANZ and derivatives trading misconduct accounting for much of the total. The Australian Securities and Investments Commission (ASIC) also helped secure more than $405 million (A$580 million) in repayments and refunds for consumers and investors, according to its annual report released October 19.