Personal Data Protection Authority: Data Breach Notification Concerning The Company Operating In The Pharmaceutical Industry

The data controller has made a data breach notification, detailed below, to the Personal Data Protection Authority ("Authority");

· The data controller determined that the cybercriminals had seized the authorized user passwords of its system and prevented its employees from accessing the system (by ransomware attacks).

· Ransomware attacks are the most common type of cyber-attack examples of which are listed first in the European Data Protection Board's "Guidelines 01/2021 on Examples regarding Data Breach Notification" and described as "In ransomware attacks, a malicious code encrypts the personal data, and subsequently the attacker asks the controller for a ransom in exchange for the decryption code".