Bonava suffers data security breach exposing customer personal details
A data security breach at residential property developer Bonava may have exposed sensitive customer information, the company has confirmed. The incident, detected after a notification from Swedish police on 27 July, targeted Bonava’s customer relationship management and complaint handling system, potentially compromising personal data (Helsingin Sanomat).
The breach may have affected names, addresses, contact details, dates of birth, personal identity codes, contact preferences, and housing-related interests, according to Bonava’s statement on its website. The company has warned customers to remain vigilant against unsolicited communications, such as emails, calls, or messages, that may attempt to exploit the exposed data (Helsingin Sanomat).
Bonava has reported the incident to Finland’s Data Protection Ombudsman and filed a criminal report in Sweden. The breach is part of a broader attack that has impacted at least 15 companies and organisations, though Bonava has not disclosed whether other Finnish entities are among those affected (Yle).
In response to the breach, Bonava states it has strengthened its system security to prevent similar incidents in the future (Helsingin Sanomat). The company is currently investigating the extent of the breach, though no further details on the perpetrators or their motives have been released (Yle).