S-Pankki Oyj – €1,800,000 Fine (Finland, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
S-Pankki Oyj faced a fine of €1,800,000 because a software error allowed customers to access each other's bank accounts. This mistake led to financial losses for some users. It highlights the importance of strong security measures to protect customer information.
What happened
A software error allowed customers of S-Pankki Oyj to log in to other customers' bank accounts.
Who was affected
Customers of S-Pankki Oyj whose accounts were improperly accessed.
What the authority found
The Finnish authority found that S-Pankki Oyj failed to implement adequate security measures, violating GDPR requirements for data protection.
Why this matters
This case shows that companies can face serious penalties for security failures that compromise customer data. Small businesses should prioritize cybersecurity to avoid similar issues.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Finish DPA has imposed a fine of EUR 1,800,000 on S-Pankki Oyj. Due to a software error, customers of the controller were able to log in to the bank accounts of other customers, resulting in financial losses.
Related Enforcement Actions (0)
No other enforcement actions found for S-Pankki Oyj in FI
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
8 September 2025
Authority
Tietosuojavaltuutetun toimisto
Fine Amount
€1,800,000
Enforcement Tracker ID
ETid-2873
About this data
Cite as: Cookie Fines. S-Pankki Oyj - Finland (2025). Retrieved from cookiefines.eu
Last updated: