GRC Report Staff

Japan Urges Banks to Strengthen Cybersecurity After Breaches Affect Millions

Japan's financial regulator has urged banks to strengthen their cybersecurity defenses following a series of attacks that exposed millions of customer records and prompted a senior government official to describe the situation as a cybersecurity emergency.

Microsoft-Owned Xandr Hit With Record $9.6 Million Norwegian Privacy Fine

Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr approximately $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive personal information belonging to users of the dating app Grindr.

Poland Fines Nasz Prąd $5.49 Million Over Unfair Renewable Energy Contracts

Poland's consumer protection authority has fined renewable energy installer Nasz Prąd approximately $5.49 million (PLN 21.475 million) after finding 21 unfair provisions in contracts that allowed the company to change equipment specifications, impose substantial penalties on homeowners and remove heating systems over unpaid balances.

Norway Financial Supervisory Authority Issues Warning on Blueberry Capital Citing Spanish CNMV Alert

The Norway Financial Supervisory Authority (Finanstilsynet) published a warning on Blueberry Capital on September 2, 2026. The warning relays an alert originally issued by Spain's securities regulator, the CNMV. Compliance teams should treat the entity as a potentially unauthorized or high-risk counterparty and screen for any exposure.

Bundesbank President Signals September ECB Rate Hike Amid Elevated Inflation and Market Volatility

Bundesbank President Joachim Nagel indicated in a Le Monde interview that an ECB rate increase at the September 10, 2026 meeting is widely expected, with markets pricing in more than a 95% probability. He declined to offer guidance beyond that meeting, citing energy price swings and volatile financial markets. Compliance and risk teams should treat this as a signal of a tightening cycle and of heightened market, liquidity, and fiscal-policy uncertainty.

Norway FSA Republishes Luxembourg CSSF Warning on Nexura VG Website

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about "Nexura VG," referencing a CSSF (Luxembourg) notice on the website www.nexuravg.com. The notice signals a suspected unauthorized or fraudulent financial services operation. Compliance teams should screen for exposure and update their watchlists.

Norway FSA Issues Warning on Indylux Capital S.à r.l, Luxembourg Entity Linked to CSSF Notice

The Norwegian Financial Supervisory Authority (Finanstilsynet) has published a warning about Indylux Capital S.à r.l, a Luxembourg-based entity, and references a related Luxembourg CSSF warning about the website www.tresorwacht.com. Compliance teams should treat the entity and associated website as potential unauthorized or fraudulent activity and update screening and client-protection controls accordingly.