AKI imposed a heavy fine on Allium UPI OÜ. The fine amounts to three million euros. Allium UPI is a company that manages Apotheka's loyalty program. The company failed to adequately protect customer data.
In early 2024, a security breach occurred. Unauthorized individuals gained access to customer data. The leaked data included names, ID numbers, phone numbers, and addresses. Purchase history was also exposed, containing information about health and private life.
The company neglected crucial security measures. For instance, there was no multi-level authentication. Multiple individuals used the same administrator account. Database backups were not securely stored.
The fine is significant due to the severity of the issue. The decision is based on EU regulations. The fine is not yet final. The company has 15 days to appeal.