meta_id 3327858

On July 14, 2026, the Financial Market Authority (FMA) imposed a fine of EUR 42,000 on Western Union International Bank GmbH for repeated breaches of digital operational resilience notification obligations under the Digital Operational Resilience Act for the Financial Sector (DORA). Western Union International Bank GmbH is required to notify the FMA of major information and communication technology-related incidents (ICT-related incidents) within specified deadlines under Article 19(4) of Regulation (EU) 2022/2554 and Article 5(1) of Delegated Regulation (EU) 2025/301. The credit institution failed to meet these obligations by submitting several delayed initial and intermediate reports relating to ICT-related incidents. These repeated failures to report in a timely manner constitute breaches of the institution's regulatory notification requirements under DORA. The FMA issued the penal order through accelerated conclusion of proceedings under Article 22(2b) of the Financial Market Authority Act (FMABG; Finanzmarktaufsichtsbehördengesetz). The sanction is legally final and not subject to further appeal. This enforcement action underscores the FMA's commitment to ensuring that financial institutions comply with DORA's incident reporting requirements, which form a critical component of the EU's framework for strengthening the operational resilience of the financial sector. Timely notification of ICT-related incidents enables regulators to assess systemic risks and take appropriate supervisory action. REFERENCES: Financial Market Authority Austria (2026). "Announcement: FMA imposes sanction on Western Union International Bank GmbH for breaches of DORA notification obligations." Available at: https://www.fma.gv.at/