In brief: BaFin sanctions TeamViewer with €240,000 for insufficient security measures that enabled a 2024 cyberattack.
The German Federal Financial Supervisory Authority (BaFin) has imposed a fine of €240,000 on TeamViewer. The reason is security deficiencies revealed by a cyberattack in 2024.
BaFin has imposed a fine of €240,000 on TeamViewer. The reason lies in a cyberattack that affected the company in 2024. The supervisory authority classifies this as a violation of its regulatory framework.
For financial service providers and especially for CISOs, this action carries concrete consequences from the regulatory expectation that companies must proactively secure their IT security. BaFin thereby confirms that cyberattacks stemming from insufficient protective measures can lead to reprimands and fines — regardless of whether a data breach with immediate damage occurred.
The signal to the industry is clear: companies are obligated to design their security architecture in such a way that known attack vectors are effectively repelled. For CISOs, this entails the necessity to regularly identify, prioritize, and remediate vulnerabilities — and to be able to document these measures.
Source: www.heise.de · Published 21 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.3.