ESAgencia Española de Protección de Datos01 June 2025Data security breach
Carrefour
Carrefour fined EUR 3.2 million by AEPD for security infringements.
EUR€3,200,000
Summary
The Agencia Española de Protección de Datos imposed a EUR 3.2 million fine on Carrefour. The penalty followed five security breaches between January and April 2023 that affected the personal data of thousands of customers.
Grounds for the decision
Five security breaches that exposed customers’ personal data.