France’s data regulator fined Free SAS and Free Mobile a total of $48 million for failing to secure personal data after a hacker accessed sensitive information of 24 million subscribers. The companies violated GDPR rules by not properly notifying customers about the breach and had inadequate security measures in place. They plan to appeal the decision, claiming the penalties are excessive.