GRC Report Staff

Adidas Confirms Data Breach & Highlights Risks in Third-Party Security

Adidas has disclosed a recent data breach where unauthorized external parties obtained certain consumer data via a third-party customer service provider. While the sportswear giant quickly contained the incident and initiated a comprehensive investigation, the breach raises significant concerns about IT security, data protection, and the role of third-party vendors in safeguarding sensitive consumer data.

Aion Bank Settles Over Savings Account Payment Issues

Aion Bank has reached a settlement with the Financial Services and Markets Authority (FSMA). The agreement, finalized today, addresses errors that resulted in some customers not receiving the full interest and loyalty bonuses they were entitled to between December 2019 and June 2024.

SAP Fined €1.75 Million by BaFin for Non-Compliance with German Securities Trading Act

The Federal Financial Supervisory Authority (BaFin) has imposed a fine of €1.75 million on SAP, one of the world’s leading enterprise software companies. The fine stems from the company's failure to meet requirements under the German Securities Trading Act (Wertpapierhandelsgesetz – WpHG), specifically regarding the timely publication of key financial report information.

Germany Softens Stance on EU Supply Chain Sustainability Law

Germany has adjusted its earlier position on the European Union’s Corporate Sustainability Due Diligence Directive (CSDDD), softening calls for the law’s outright removal. A spokesperson for the German government, Stefan Kornelius, clarified today that instead of scrapping the law, the government aims to “de-bureaucratize” and “streamline” its implementation, as reported by Reuters and The Economic Times.

EBA Opens Consultation on New ESG & Financial Disclosure Guidelines for Banks

The European Banking Authority (EBA) has opened a public consultation on proposed amendments to the European Commission’s Implementing Regulation on Pillar 3 disclosures under the CRR3. The consultation focuses on enhancing the transparency and consistency of disclosures related to environmental, social, and governance (ESG) risks, equity exposures, and the aggregate exposure to shadow banking entities.

Diligent Acquires Vault in AI-Powered Ethics & Compliance Push

Diligent has acquired Vault, an AI-powered ethics and compliance platform, to enhance its governance, risk and compliance capabilities. The deal comes as organizations continue to struggle with outdated ethics systems that fail to meet evolving regulatory requirements.

L3 Technologies Settles for $62 Million Over False Claims in Defense Contracts

L3 Technologies, a big player in military communications systems, has agreed to pay $62 million to settle allegations involving false cost and pricing data submitted in defense contracts. The case highlights the importance of transparency in government contracts, especially when taxpayer dollars are on the line.