Carphone Warehouse was fined £400,000 by the Information Commissioner's Office (ICO) yesterday after a data breach in 2015 saw hackers access the personal details of millions of customers.
The ICO was given the power to fine data controllers in 2010, but is yet to reach the maximum amount available of £500,000.
Following Carphone Warehouse's record-equalling fine, CRN has ranked the top 10 fines dished out by the ICO.
10. NHS Surrey - £200,000, July 2013
NHS Surrey was fined £200,000 in 2013 for a "shocking" data breach which the ICO said at the time was "one of the most serious" it had seen.
The health body was penalised after more than 3,000 patient records were found on a second-hand computer sold through an online auction.
NHS Surrey had used a free IT disposal service to ditch the PC, which claimed to destroy hard drives found in computers before selling salvageable materials.
After being contacted by the purchaser of the hard drive, NHS Surrey found a further 39 PCs that the disposal firm had flogged - three of which still held patient data.
9. Belfast Health and Social Care Trust - £225,000, June 2012
Belfast Health and Social Care Trust was fined £225,000 in 2012 after thousands of patient records were found in a disused hospital.
The ICO found that the building was not secured properly by the trust and ended up becoming a temporary home to vandals who obtained the files.
All records were physical, including X-rays and staff payslips dating back to the 1950s, and were obtained by the intruders who posted them on the internet.
=7. Sony - £250,000, January 2013
Sony was hit by a £250,000 fine five years ago, after the online gaming network for its PlayStation console was hacked.
The incident in April 2011 saw the PlayStation Network knocked offline for several days and personal details belonging to users, including credit card details, were leaked.
Sony initially fought the fine, before relenting and paying up in 2013. The attack is believed to have cost Sony over £100m.
Article continues on next page
Infrastructure provider says international sales now make up 51 per cent of its revenue
Suzanne Chappell of TMS plans sailing venture after selling Oxfordshire-based TMS to acquisitive Chess
Withdrawal of credit insurance by some providers a 'reflection' of current challenge facing IT sector, according to MD Steve Soper
SMART's UK managing director joins Lenovo to boost SMB business