The Point: BaFin sanctions TeamViewer with €240,000 for inadequate notification following a 2024 cyberattack, which falls under NIS2 Directive requirements.
The Federal Financial Supervisory Authority (BaFin) issued a fine of €240,000 to TeamViewer on 16 July 2026. The reason is insufficient communication following a cyberattack in 2024.
BaFin imposed a fine of €240,000 against TeamViewer, the provider of remote maintenance software. The administrative act became public on 16 July 2026. The background is a cyberattack that occurred in 2024.
The reason for the sanction lies in TeamViewer’s inadequate communication following the security incident. This concerns the notification obligations that fall under the provisions of the NIS2 Directive and its national implementation. Financial service providers and critical infrastructure operators must report security breaches to supervisory authorities in a timely and complete manner.
For CISOs, the case underscores that NIS2 compliance encompasses not only technical measures but also strict documentation and timely notification of authorities following incidents. Delayed or incomplete notification can result in substantial fines, regardless of how quickly technical security measures were implemented.
Source: borncity.com · Published 24 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.3.