What do we know about the data breach at Intesa Sanpaolo?
Adds dropped word 'do' in lead
By Valentina Za
MILAN, Oct 22 (Reuters) -Prosecutors in the southern Italian city of Bari are investigating an alleged data breach at the country's biggest bank Intesa Sanpaolo ISP.MI, in which Prime Minister Giorgia Meloni's account may have been accessed.
Here is what we know about the incident so far.
WHAT HAPPENED?
An Intesa employee at a branch in the small town of Bitonto, close to Bari in the Puglia region, is alleged to have accessed the current account data of around 3,500 customers, including many high profile figures such as Meloni and her predecessor Mario Draghi between February 2022 and April 2024.
WAS THE SYSTEM HACKED?
There has been no cybersecurity breach, Intesa has said. The employee worked in Intesa's agricultural business, an industry where many companies are so small, often a single-person enterprise, that assessing their credit standing means looking at account data. The person had authorisation to access the data.
WHAT KIND OF DATA ACCESS DO INTESA STAFF NORMALLY HAVE?
Aside from employees in specific roles, such as online support staff who need access to all customer accounts, Intesa employees only have visibility on clients whose data they need to see to perform their duties. For example, it could be the data of clients of the branch where they work.
HOW DOES THE CONTROL SYSTEM WORK?
The system is designed to detect anomalies, such as a single account being accessed too frequently over a period of time.
There is no alert threshold linked to the number of data requests by a single employee with permission, who would normally perform hundreds of transactions every day.
The rogue Intesa employee is alleged to have abusively accessed the accounts of around 3,500 customers about 6,600 times, but this was spread over the course of 500 working days, making it difficult for the system to detect anything out of the ordinary.
The control system aims to protect the privacy of all clients and contains no trigger linked to politically exposed people, a category which is relevant instead for checks against money laundering and transaction monitoring.
WERE THE DATA EXPORTED?
Based on the internal checks Intesa has conducted, no data was downloaded, a person close to the matter told Reuters.
WHY DID INTESA INTESA DO?
Intesa has said that once the internal control system flagged an anomaly and initial checks confirmed the irregularities, it started a disciplinary procedure against the employee and a "comprehensive" audit process to get a full picture of the events.
The employee was suspended from work pending the results of the investigation as a precaution, and Intesa informed Italy's data protection authority, providing updates as it probed the matter internally.
Intesa dismissed the employee due to "serious and repeated violations of internal rules, regulations and procedures" after completing the analysis of the events and the disciplinary process. At that point it was also in a position to file a complaint with prosecutors.
The magistrates were already at work because an Intesa customer had filed a complaint with them, when the bank informed them of the breach to their account.
The bank issued a public apology on Oct.13, created a security division and last week appointed as its head a recently retired senior police officer.
Reporting by Valentina Za; Editing by Sharon Singleton
免责声明: XM Group仅提供在线交易平台的执行服务和访问权限，并允许个人查看和/或使用网站或网站所提供的内容，但无意进行任何更改或扩展，也不会更改或扩展其服务和访问权限。所有访问和使用权限，将受下列条款与条例约束：(i) 条款与条例；(ii) 风险提示；以及(iii) 完整免责声明。请注意，网站所提供的所有讯息，仅限一般资讯用途。此外，XM所有在线交易平台的内容并不构成，也不能被用于任何未经授权的金融市场交易邀约和/或邀请。金融市场交易对于您的投资资本含有重大风险。
所有在线交易平台所发布的资料，仅适用于教育/资讯类用途，不包含也不应被视为用于金融、投资税或交易相关咨询和建议，或是交易价格纪录，或是任何金融商品或非应邀途径的金融相关优惠的交易邀约或邀请。
本网站上由XM和第三方供应商所提供的所有内容，包括意见、新闻、研究、分析、价格、其他资讯和第三方网站链接，皆保持不变，并作为一般市场评论所提供，而非投资性建议。所有在线交易平台所发布的资料，仅适用于教育/资讯类用途，不包含也不应被视为适用于金融、投资税或交易相关咨询和建议，或是交易价格纪录，或是任何金融商品或非应邀途径的金融相关优惠的交易邀约或邀请。请确保您已阅读并完全理解，XM非独立投资研究提示和风险提示相关资讯，更多详情请点击 这里。
