Back Therecord.Media

Italian regulator fines financial giant $36 million for data protection failures

Therecord.Media • March 30, 2026

The Italian Data Protection Authority fined Intesa Sanpaolo SpA for what it called “serious shortcomings in personal data security, due to the inadequacy of the technical and organizational measures adopted.”

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Intesa Sanpaolo Fined €31.8M for Data Breach Affecting 3,500+ Customers Intesa Sanpaolo faced a €31.8 million penalty from Italy's data protection authority due to a data breach affecting over 3,500 customers. The breach, which lasted more than two years, involved unauthorized access to sensitive banking information by a single employee who made over 6,600 queries. The investigation revealed serious shortcomings in the bank's data security measures, including ineffective internal monitoring systems that failed to detect the anomalous access. The breach included data from high-risk individuals, such as public figures and politically exposed persons, raising concerns about the adequacy of oversight. The bank's notification to customers was delayed and incomplete, limiting their ability to respond effectively. The incident highlighted significant violations of GDPR provisions regarding data integrity and accountability. 3 sources 66

Italian regulator fines financial giant $36 million for data protection failures

The full story

Extracted Entities

Attack Types (1)

Companies (1)