FITietosuojavaltuutetun toimisto01 January 2025Insufficient security measures
Sambla Group
Sambla Group: Finnish Data Protection Authority, EUR 950,000 for insufficient security measures.
EUR€950,000
Summary
The Finnish Data Protection Authority fined Sambla Group EUR 950,000 after unauthorized parties accessed credit application data by manipulating web addresses. The authority found that the company had not implemented adequate safeguards to prevent the breach.
Grounds for the decision
Insufficient security measures allowed unauthorized access to credit application data.