10月31日，公安部网安部门在“护网—2026”专项行动中，公布了3起不履行数据安全或网络安全保护义务的典型案例 1。这些案件涉及福建漳州某医疗机构、龙岩某公司及泉州某公司，因权限管理混乱、忽视非核心系统防护及测试服务器安全漏洞等问题被依法处罚并责令改正 1。警方提示相关单位需落实全流程数据安全管理，强化风险监测与应急响应机制 1。
具体违规事实如下：福建漳州某医疗机构导出1800余条工作数据存储于未部署有效安全防护措施的互联网电脑，依据《中华人民共和国数据安全法》受到处罚 1。福建龙岩某公司自建来访登记系统无安全防护，导致数据长期处于不设防状态，同样依据《中华人民共和国数据安全法》受到处罚 1。福建泉州某公司的测试服务器未及时下线遭攻击入侵，依据《中华人民共和国网络安全法》受到处罚 1。
关于法律依据及罚款额度，《中华人民共和国数据安全法》规定，拒不改正或造成严重后果的，处五十万元以上二百万元以下罚款；《中华人民共和国网络安全法》规定，导致危害后果的，处五万元以上五十万元以下罚款 1。
The cybersecurity department of the Ministry of Public Security has disclosed three typical cases involving entities that failed to fulfill their obligations regarding data security and network safety protection 1. The announcement was made on October 31 as part of the "Protect the Net – 2026" special operation, targeting violations by a medical institution in Zhangzhou, a company in Longyan, and another firm in Quanzhou, all located in Fujian Province 1. These entities were penalized and ordered to rectify issues ranging from chaotic permission management and neglect of non-core system defenses to security vulnerabilities in test servers 1.
In the first case, a medical institution in Zhangzhou exported over 1,800 work-related data records to internet-connected computers that lacked effective security protections 1. This violation resulted in penalties under the Data Security Law of the People's Republic of China 1. Meanwhile, a company in Longyan operated a self-built visitor registration system without any security measures, leaving its data exposed for an extended period 1. Consequently, this entity was also punished pursuant to the Data Security Law 1.
A third company in Quanzhou faced legal action after failing to take its test server offline in a timely manner, which led to attacks and intrusions 1. This incident was handled under the Cybersecurity Law of the People's Republic of China 1. Under the relevant laws, entities that refuse to correct such violations or cause serious consequences face fines between 500,000 and 2 million yuan according to the Data Security Law, while those causing harmful outcomes under the Cybersecurity Law are subject to fines ranging from 50,000 to 500,000 yuan 1. Police authorities emphasized that relevant organizations must implement full-process data security management and strengthen risk monitoring and emergency response mechanisms 1.
评论
还没有评论，欢迎留下第一条。