Nordnet security flaw led to unauthorized order

A security flaw in the investment platform Nordnet allowed customers to make trades on other people’s accounts during a breach on Tuesday. At least one such incident has been documented, and the transaction concerned has been reversed. No reported cases of financial loss have occurred. The error that caused this issue gave certain customers access to others’ accounts for 20 minutes. Nordnet shut down the platform for several hours as a response. The exact impact scope is still under review, with a maximum estimate of a few thousand customers affected. Nordnet has over half a million customers in Denmark. The Swedish Data Protection Authority is to decide on the potential fallout of the breach, and Nordnet could face a fine up to 500 million Swedish kronor, equivalent to around 330 million Danish kroner. Nordnet’s Danish press officer asserts ongoing communication with relevant authorities but says it is too early to speak of potential consequences.