Krzysztof Jasiołek

European Digital Resilience in Payments: Tackling Third-Party Concentration Risk and Service Deterioration Across SEPA and Core Banking Systems Resilience has become a payments KPI, not just an IT topic Across Europe, payment modernisation has pushed institutions toward faster rails, richer data (ISO 20022), and always-on customer expectations. Yet the industry’s operational reality is now defined ... read full article https://lnkd.in/dHCTqzMB #SEPApayments #multiIBAN #thirdpartyconcentrationrisk #fintechconsulting #Europeanpayments Telegram Channel https://lnkd.in/edrA4wnU

3

Recently, I was informed that Dom Development S.A., a major residential developer in Poland, suffered a cyberattack resulting in the unauthorized extraction of data from its IT systems. According to the official notification, my personal data may have been affected. What is particularly concerning is the breadth and sensitivity of the data categories involved. Based on the communication sent to impacted individuals, the potentially exposed data appears to include not only standard identification and contact details, but also PESEL, identity document data, bank account numbers, transaction history, financial information related to crediting, civil status, and health-related data. This represents a combination of high-risk personal data and special categories under GDPR. While the company states that it has complied with its obligations under Articles 33 and 34 of the GDPR, the timeline between the incident and direct communication to affected individuals highlights how critical incident detection, escalation, and transparent communication are as part of mature data governance. Timeliness in this context is not a formality, it is a core risk-mitigation control. An additional concern is the sequence of communication. In my case, I became aware of the incident through media reports and public social media discussions before receiving a direct notification from the company. From a data protection and incident response perspective, learning about a potential breach affecting one’s own data via third-party channels undermines trust and reinforces the need for prompt, direct, and prioritized communication with affected data subjects. From a risk management perspective, the response also raises questions about whether the remedial measures offered are proportionate to the potential impact of the breach. Beyond formal notifications and general guidance, there appears to be limited evidence of enhanced support, concrete remediation, or accountability measures that would meaningfully reduce downstream risk for data subjects. In incidents involving identifiers with long-term consequences, compliance alone may not be sufficient to restore trust. I am sharing this not to sensationalize a single incident, but to underline a broader point: organizations that process large volumes of sensitive personal and financial data must treat cybersecurity and data protection as core operational risks, not auxiliary IT concerns. Incident response maturity, realistic threat modeling, and timely communication are essential components of that responsibility. We should continue to expect high standards of accountability and transparency when it comes to the protection of personal data. Repeated exposure to such incidents erodes trust, even when formal compliance requirements are met. It is my understanding this case has already been notified to Urząd Ochrony Danych Osobowych and the DPA as always will keep up their good work of oversight and control Mirosław Wróblewski

10

🎥 The Top 3 payment trends for the next year. Watch Cosmin Cosma, Chairman of Romanian Fintech Association and CEO of Finqware, who shares his insights in front DIGI PAY. 🚀 Instant Payments - everyone's talking about instant payments at the European level 💡 Open Banking - the future of payments is here 🚀 Digital Euro - the new payments are generates new challenges The most powerful debate at DIGI PAY 2025: Cards vs A2A Payments shaped the future of payment discussions across Eastern Europe. This compelling debate brought together industry titans to tackle the critical question: Are we heading toward two parallel payment rails for consumers? Distinguished Panel: • Cosmin - Chairman, Romanian Fintech Association; CEO, Finqware • Oana Cotic - Sr. Manager, Risk Issuing Solutions Sales Executive, Visa • Tsvetomir Doskov - SVP Financial Industry, Sirma Group Holding • Moderator: Pavel Kaminsky - Founder and CEO, 7Security The synergy between these payment industry leaders created one of the most insightful discussions on digital payment evolution, regulatory challenges, and consumer behavior trends across Bulgaria, Romania, and the broader region. Don't miss Cosmin's expert perspective on how fintech innovation is reshaping payment landscapes across Eastern Europe. Watch the full video. What's your take on the Cards vs A2A future? Share your thoughts below! 👇 #DIGIPAY #digipayeventbulgaria #CardPayments #A2APayments #InstantPayments #OpenBanking #DigitalEuro #RomanianFintech #PaymentInnovation #FinTech #DigitalPayments #EasternEurope

19

1 Comment

Moldova joins SEPA: building a modern, inclusive payments landscape In our latest interview, Anca Dragu, Governor of the National Bank of Moldova, discusses how SEPA membership and the launch of the MIA instant payments system are transforming the country’s payment landscape. 📖 Read the full interview :https://lnkd.in/emmRdaia

59

A better way to bank, every day. TBC raised the bar for digital banking. The bank set out to replace legacy and fragmented channels with a unified, scalable and PSD2 compliant platform that could support growth and deliver a consistently high quality customer experience. With Finshape, TBC introduced an integrated digital environment across web and mobile and continued to refine and expand it at impressive speed. The outcome: ✔️ 7× growth in digital usage in year one ✔️ 96% retail offloading and lower servicing costs ✔️ International awards including Global Finance’s Best Integrated Internet Bank and Most Innovative Corporate Digital Bank in CEE 2021 ✔️ A reliable and scalable digital experience that millions rely on every day 🧩See below how it came together #Finshape #TBC #ClientSuccess #Fintech #DigitalBanking

16

Poland’s leading mobile payment system, BLIK, experienced service disruptions over last weekend and into Monday after external DDoS attacks targeted its infrastructure. Intermittent outages affected users attempting to make payments through their banking apps. With more than a billion transactions processed in the first half of 2025 alone, BLIK has become a critical component of Poland’s financial ecosystem. We have published a short briefing on the incidents here: https://lnkd.in/dtwBcBrZ #cybersecurity #DDoS #networksecurity #threatintelligence #infosec #DDoSNews #DDoSDefence

4