S-Bank fined €1.8m for data security vulnerability in its mobile app

Some customers fell victim to a data breach which caused financial losses.

The Sanctions Board of Tietosuojavaltuutetun toimisto – the Finnish Data Protection Ombudsman (DPO) – has fined S-Bank €1.8m ($2.1m) for data security failings within the authentication process of its mobile app S-Mobile.

In 2022, a software bug in the authentication service made it possible to log into the online services with the

The

Free Trial

Register for free to keep reading.

To continue reading this article and unlock full access to GRIP, register now. You’ll enjoy free access to all content until our subscription service launches in early 2026.

  • Unlimited access to industry insights
  • Stay on top of key rules and regulatory changes with our Rules Navigator
  • Ad-free experience with no distractions
  • Regular podcasts from trusted external experts
  • Fresh compliance and regulatory content every day
Register for free Already a member? Sign in