AEPD fines Vodafone Spain €1.8M over phone and Super WiFi security breaches
The Spanish Data Protection Agency imposed two GDPR sanctions on Vodafone Spain totaling €1.8 million for issues in its telephone customer-service channel and a Super WiFi security breach. The AEPD blamed failures in outsourced services, with the Super WiFi incident affecting about 60,000 users after a November 2023 cyberattack reached Plume servers. Vodafone appealed to the National Court after paying and stopped Super WiFi marketing with Plume in February 2025, later migrating to Super WiFi 6 managed by AirTies.