The Italian Data Protection Authority has fined Italy's biggest bank Intesa Sanpaolo S.p.A.

€31.8 million for serious shortcomings in personal data security, due to the inadequacy of the technical and organizational measures adopted, the authority said Monday on a data breach notified in July 2024.

The Authority's investigation, initiated following the data breach notified by the bank, found - a statement explains - that "an employee accessed, without justifiable reason, the banking information of 3,573 customers, making over 6,600 searches between February 21, 2022, and April 24, 2024." And these "unauthorized accesses were not detected by internal control systems." photo: Intesa Sanpaolo CEO Carlo Messina

Riproduzione riservata © Copyright ANSA