Valtori as an authority informs data subjects: Data Protection Notice on a Data Breach

We are publishing this notice in accordance with Article 34 of the General Data Protection Regulation to inform all Valtori data subjects about a personal data breach.

In this context, a Valtori data subject refers to current and former employees as well as individuals who have or have had an assignment-based relationship with Valtori.

What has happened?

Data held by Valtori has been the target of a data breach. This incident also constitutes a personal data breach. Through this notice, we are informing data subjects about the situation at a general level. It is important that you remain alert to potential misuse attempts, such as phishing attempts.

The personal data breach began on 29 January 2026 and ended on 30 January 2026.

What personal data has been compromised?

The following personal data has been compromised:

• Contact details, such as name, work email address, and phone number
• Technical information about the device
• Country-level location information

The data set also includes outdated or deleted information relating to organizations or users.

How might this affect you?

As a result of the personal data breach, personal data may spread and be used for phishing attempts or other forms of misuse. The breach particularly targeted work contact details, so extra caution is recommended in relation to these.

What actions has Valtori taken?

After the breach, the system was quickly isolated from the network and an investigation into the data breach was launched. We have submitted the necessary notifications to the authorities, including the Data Protection Ombudsman and other competent authorities. Once the incident was found to be more extensive than initially assessed, we informed data subjects without undue delay. We are communicating about the incident through both internal and public notices to ensure the information reaches all data subjects as effectively as possible.

Do I need to take any action?

Based on the compromised data, phishing attempts may increase. You should remain vigilant and treat links sent via text messages, for example, with caution. More information for victims of data breaches can be found here:

Further information

Valtori Data Protection: [email protected]