S-Pankki Oyj
€1,800,000
Insufficient technical and organisational measures to ensure information security
Date de décision
8 septembre 2025
Autorité
Deputy Data Protection Ombudsman
FI
Secteur
Finance, Insurance and Consulting
Pays
FI
Droit
GDPRStatut
FINALDescription
The Finish DPA has imposed a fine of EUR 1,800,000 on S-Pankki Oyj. Due to a software error, customers of the controller were able to log in to the bank accounts of other customers, resulting in financial losses.
Citations légales
Art. 5 (1)Art. 25 (1)Art. 32 (1)
Questions et violations
Insufficient technical and organisational measures to ensure information security