Finland: Data Protection Ombudsman's Office opened an investigation into S-Banken over information security negligence in online banking

Description

Data Protection Ombudsman's Office opened an investigation into S-Banken over information security negligence in online banking

On 15 September 2022, the Finnish Data Ombudsman opened an investigation into a personal data incident at S-Banken caused by a system failure in online banking identification between 20 April and 5 August 2022. A few hundred customers were able to log in with another person’s codes, leading to unauthorised payments and third-party access. The investigation will examine whether S-Banken protected data properly and how it responded to the breach.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2022-09-15
under deliberation

On 15 September 2022, the Finnish Data Ombudsman opened an investigation into a personal data incid…

2025-09-08
in force

On 8 September 2025, the Data Protection Ombudsman's Office imposed a penalty of EUR 1.8 million ag…