VK fined 60,000 rubles for leaking user data

The World Court of the Savelovsky District of Moscow fined VK 60,000 rubles. for the data leakage of users of the mail service Mail.ru, reported in the TASS court.

“VK LLC was found guilty of committing an administrative offense, the company was fined 60,000 rubles,” said court spokeswoman Maria Mikhailova.

The court found that VK violated the law on personal data (part 1 of article 13.11 of the Code of Administrative Offenses).

At the same time, according to the results of a preliminary internal investigation, the company established that the leak occurred due to “an external attacker in April 2022 entered the test loop of the operator’s IT infrastructure.”

Information about the posted personal data of Mail.ru mail users appeared in January of this year. Then in the press service of the postal service declaredthat this data got into the network due to an information leak at the beginning of 2022 from another service and mail users “are not in danger.”

Russian President Vladimir Putin earlier instructed the government to consider introducing turnover fines for companies that have leaked personal data of Russians by July 1, 2023. The instruction was given following the meeting of the Council for the Development of Civil Society and Human Rights, held on December 7, 2022.

The Mintsifra has been discussing the idea of ​​introducing turnover fines for leaks since April 2022. In July, the ministry announced that it had begun preparing a relevant bill and plans to submit it to the fall session of the State Duma. It involves the introduction of amendments to the Code of Administrative Offenses, according to which the company where the leak occurred can be fined 1% of the annual turnover. The amount of the fine will rise to 3% if the company tried to hide the problem. Now the Code of Administrative Offenses provides for fines for data leakage for legal entities in the amount of 60,000 to 100,000 rubles, in case of a repeated offense – up to 500,000 rubles.