DisclosureLens
IRELANDUnknownLow

Ryanair DAC

bd_5417fc32ad3da9a7 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 10, 2020

To disclose

—

Affected

Not disclosed

Confidence

95%
Full breach record for Ryanair DAC →

Regulator's decision — not a breach notification

This record is a regulator's decision, not the organisation's own breach notice. Breach-notification fields (discovery date, notification clock) are structurally absent — what this source establishes is the outcome and the provisions the decision cites.

The DPC (Ireland) issued a complaint regarding Ryanair DAC. Outcome: Upheld. GDPR articles: Article 4(22) GDPR, Article 12(3) GDPR, Article 15 GDPR, Article 24(1) GDPR, Article 32(1) GDPR, Article 32(4) GDPR, Article 58(2)(b) GDPR, Article 60 GDPR, Article 60(3) GDPR, Article 60(4) GDPR.

Incident timeline — partial

? — ?

Breach window unknown

Nov 10, 2020

Filed

—

No linked breach filing · watching

Compliance clocks stay unassessable until a breach filing is linked. This record is the regulator's action, not a breach notice. Dashed segments fill in automatically when corroboration arrives.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

If an SEC 8-K, state-AG notice or victim statement lands, DisclosureLens merges it into an incident and links it here.

Source ceiling

  • data categories
  • cross-border scope
  • outcome + articles (decisions)
  • discovery date
  • affected count
  • notification clock

See the underlying breach notice, if filed.