| ID | Detected (date and time) | Occurred (date and time, if known) | Facts: what happened | Data subjects affected (categories, approx. number) | Records affected (categories, approx. number) | Effects of the breach | Remedial action taken | Supervisory authority notified (date, or reason not) | Data subjects notified (date, or reason not) | Owner |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| EX-001 (fictional) | 2026-02-10 09:30 | 2026-02-09 22:00 | An exported customer list was shared by mistake with one other customer. | Customers, approx. 40 | Names and work email addresses, approx. 40 | Low: contact details only, one recipient who confirmed deletion | Link revoked, recipient confirmed deletion in writing, sharing check added to the export | Reason not notified: unlikely to result in a risk to individuals (see assessment note) | Not notified | Founder |