Sadya issues penalties for data breaches