Finland

S-Pankki Oyj

1,800,000 €

GDPR enforcement action by Deputy Data Protection Ombudsman on 2025-09-08.

Rank · Sector

#18

of 322 in Finance, Insurance and Consulting

Rank · Finland

of 27

Rank · All fines

#128

of 3,050

Case details

Authority: Deputy Data Protection Ombudsman
Date: 2025-09-08
Controller / Processor: S-Pankki Oyj
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 25 (1) GDPR, Art. 32 (1), (2) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Finish DPA has imposed a fine of EUR 1,800,000 on S-Pankki Oyj. Due to a software error, customers of the controller were able to log in to the bank accounts of other customers, resulting in financial losses.

Open original source Links to the regulator's original publication or another source.