The Information Commissioner fined this pharmacy operator €320,000 for failing to ensure information security – specifically, storing approximately 500,000 documents containing personal data including medical information in unsealed containers placed behind a building, resulting in water damage to the documents.

https://ico.org.uk/media/action-weve-taken/enforcement-notices/2616741/doorstop-en-20191217.pdf