- Enforcing jurisdiction
- Sweden · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Sportadmin i Skandinavien AB – €565,000 Fine (Sweden, 2026)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Sportadmin i Skandinavien AB was fined EUR 565,000 after a cyberattack exposed the personal data of over 2 million individuals, including minors. The company failed to protect its website against a SQL injection attack, which allowed the hacker to access sensitive information. This case highlights the importance of robust cybersecurity measures for businesses handling personal data.
What happened
A cyberattack on Sportadmin i Skandinavien AB exposed personal data of 2,126,075 individuals due to inadequate website security.
Who was affected
Individuals whose personal data, including minors, was published on the darknet after the cyberattack.
What the authority found
The Swedish DPA ruled that Sportadmin i Skandinavien AB violated Article 32 of GDPR by failing to implement adequate security measures.
Why this matters
This ruling emphasizes the need for companies to prioritize cybersecurity to protect personal data. Businesses should regularly assess their security measures to prevent data breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Swedish DPA has imposed a fine of EUR 565,500 on Sportadmin i Skandinavien AB. The controller suffered a sucessfull cyber attack, resulting in personal and special category data of 2,126,075 individuals, including minors, beeing published in the darknet. The attack happend due to an succesfull SQL injection on one of the controllers websites, which had not been protected against this kind of attack, granting the attacker access to the controllers server, allowing him to exfiltrate said data.
Related Enforcement Actions (1)
Other enforcement actions involving Sportadmin i Skandinavien AB in SE
Details
Fine Date
26 January 2026
Authority
Integritetsskyddsmyndigheten
Fine Amount
€565,000
Enforcement Tracker ID
ETid-3027
About this data
Cite as: Cookie Fines. Sportadmin i Skandinavien AB - Sweden (2026). Retrieved from cookiefines.eu
Last updated: