GRC Report Staff

Fortnum Private Wealth Fined Over Cybersecurity Failures Affecting 55,000-Client Network

Australian financial services firm Fortnum Private Wealth has been ordered to pay a $939,000 (A$1.35 million) penalty after admitting it failed to adequately manage cybersecurity risks across a network of financial advisers serving around 55,000 retail clients.

FRC Identifies Gaps in Financial Disclosures & Intangible Value Reporting

The UK's Financial Reporting Council (FRC) has found no material issues with how 20 listed companies applied financial instruments accounting requirements, although its examination of their annual reports identified weaknesses in the clarity of certain financial disclosures.

South Korea Expands Cybersecurity Scrutiny After Hacking Incidents Expose 100,000 Customer Data Records

South Korean financial authorities are preparing a review of cybersecurity controls after a series of attacks exposed approximately 100,000 pieces of customer information across 16 financial companies, deepening concerns raised by earlier reports that hackers had used a Chinese-developed artificial intelligence agent to breach banking systems.

Norway FSA Relays Luxembourg CSSF Warning on Carrera Finance S.A. Website

The Norway Financial Supervisory Authority has published a warning about Carrera Finance S.A., an entity linked to Luxembourg, by relaying a notice from Luxembourg's financial regulator (CSSF) concerning the website www.carrera-finance.digital. Compliance teams should treat the entity as a potentially unauthorized or fraudulent actor and take steps to screen for exposure. The source content is brief, so teams should review the original CSSF notice for details.

Norway FSA Flags Fraudulent Misuse of Winvest International S.C.S., FIAR Name

The Norway Financial Supervisory Authority has published a warning about the Luxembourg-based entity Winvest International S.C.S., FIAR. The notice links to a Luxembourg CSSF warning about fraudulent activity by persons misusing the entity's name. Compliance teams should screen for the name and treat any dealings with it or its impersonators as high risk.

FINTRAC Fines New Brunswick Lottery and Gaming Corporation CAD $399,712.50 for Unfiled STRs

FINTRAC imposed an administrative monetary penalty of CAD $399,712.50 on the New Brunswick Lottery and Gaming Corporation for failing to submit suspicious transaction reports (STRs) when reasonable grounds to suspect existed. The action shows continued enforcement focus on STR obligations in the casino sector and follows a record year of FINTRAC penalties. Compliance teams should treat it as a prompt to test their own suspicious transaction detection, escalation, and reporting controls.

Norway FSA Relays CSSF Warning on Fraudsters Misusing the Name of ICI Invest S.A.

The Norwegian Financial Supervisory Authority has published a warning that relays a Luxembourg CSSF notice about fraudulent activities by persons misusing the name of ICI Invest S.A., a Luxembourg-based entity. Compliance teams should treat this as an impersonation and investment fraud alert and update screening, client-protection, and fraud-monitoring controls accordingly.