Published by Global Banking & Finance Review®
Posted on March 30, 2026
2 min readLast updated: March 30, 2026
Add as preferred source on GoogleItaly’s data protection authority has fined Intesa Sanpaolo €31.8 million ($36.41 million) following a data breach affecting approximately 3,500 customers over two years. The breach, involving unauthorized access by an employee, was deemed severe by regulators.
MILAN, March 30 (Reuters) - Italy's data protection authority said on Monday it had fined the country's biggest bank Intesa Sanpaolo 31.8 million euro ($36.41 million) over a data breach case that involved some 3,500 customers over two years.
According to the agency's investigation, an Intesa employee accessed banking information of 3,573 customers, carrying out more than 6,600 consultations between February 2022 and April 2024.
"These unauthorised accesses went undetected by the bank’s internal control systems, revealing significant weaknesses in its monitoring and prevention mechanisms," the authority, known in Italy as the 'Garante', said in a statement.
Intesa Sanpaolo did not immediately respond to a request for comment.
Among the clients affected were individuals with prominent public roles for whom enhanced control measures should have been in place, the Garante said.
In setting its fine, the authority said it took into account corrective measures subsequently adopted by the bank to strengthen its internal control systems and data security safeguards.
($1 = 0.8734 euros)
(Reporting by Elvira Pollina, editing by Cristina Carlevaro and Gavin Jones)
Intesa Sanpaolo was fined for a data breach that affected around 3,500 customers over two years.
The fine was 31.8 million euros, equivalent to about $36.41 million.
Approximately 3,500 customers were involved in the data breach.
The fine was announced by Italy's data protection authority and reported by Reuters.
The data breach spanned a period of two years.
Explore more articles in the Finance category
