1 & 1 Telecom was fined after people calling the call center were able to get information about the clinics by giving only their name and date of birth. This information was provided by BfDI.

https://www.bankinfosecurity.com/gdpr-breach-german-privacy-regulator-fines-11-telecom-a-13482