Global biggest data breach fines, penalties, and settlements worldwide 2023

As of September 2023, the most significant data privacy violation fine worldwide was the Chinese vehicle-for-hire company Didi Global. In July 2022, China's data privacy regulator fined the company 8.026 billion Chinese yuan or 1.19 billion U.S. dollars. The 2021 Amazon fine issued by Luxembourg's data privacy regulation authorities was 877 million U.S. dollars and was the second-biggest data breach fine as of the measured month. Prior to 2021, the largest fine for a data breach was the 2019 fine of Equifax. Because of unpatched vulnerabilities, nearly 150 million people were affected, which caused the American consumer credit reporting agency to pay at least 575 million U.S. dollars.