Cybernews - Cybernews
Intesa Sanpaolo Fined €31.8M for Data Security Failures Intesa Sanpaolo S.p.A. has been fined €31.8 million by Italy's data protection authority for inadequate data security measures. Between February 2022 and April 2024, an employee accessed the accounts of 3,573 customers, including public figures, over 6,600 times without authorization. The bank's internal controls failed to detect these breaches, highlighting deficiencies in monitoring employee activities and safeguarding data integrity and confidentiality. The fine reflects the severity and duration of these violations. Intesa Sanpaolo must now enhance transparency, data minimization, and security measures to comply with regulatory standards.
Scenario: Attack / Internal Credit Card CompromiseTo read more operational risk news, register for free on MSTAR Platform.
Register for free