Latitude Financial Fined $3.96M for Spam Violations After 2.7 Million Breaches

Latitude Financial Fined $3.96M for Spam Violations After 2.7 Million Breaches

Latitude Financial has been fined A$3.96 million by Australia’s communications regulator after sending millions of marketing messages that breached spam laws, marking the second major penalty against the lender in just a few years and raising fresh concerns about its compliance record.

The Australian Communications and Media Authority found the company broke spam rules more than 2.7 million times, after distributing over 2.3 million promotional messages between March 2024 and April 2025. Many of those messages failed to include accurate contact information, while nearly 345,000 lacked a working unsubscribe function — a basic legal requirement designed to protect consumers.

The messages promoted Latitude’s credit cards, loans and financial services, often telling recipients they could reply “STOP” to opt out. In practice, that option did not function properly in many cases, leaving customers without a clear way to stop receiving communications.

This latest penalty follows a A$1.5 million fine issued to the company in 2022 for similar breaches, making Latitude a repeat offender under laws that have been in place for more than two decades. Regulators have made clear that such repeated failures are no longer viewed as minor oversights, particularly for large financial firms with established compliance obligations.

Repeat failures raise concerns beyond spam

Authority member Samantha Yorke said the scale and repetition of the breaches were particularly concerning, noting that there was “no excuse” for ongoing non-compliance after previous enforcement action. The regulator has warned it will closely monitor how Latitude meets its obligations going forward.

As part of the enforcement action, Latitude is now legally required to appoint an independent consultant to review its compliance systems and provide regular reports to the authority. The move signals that regulators are pushing for structural fixes rather than relying solely on financial penalties.

The case lands at a difficult time for the company, which is still dealing with the aftermath of a major 2023 cyberattack that exposed the personal data of 7.9 million customers, including sensitive identity information. Financial details linked to around 900,000 loan applications were also compromised in the breach, further damaging customer confidence.

Although a separate lawsuit related to the data breach was later dismissed, the combination of cybersecurity concerns and repeated regulatory violations adds pressure on Latitude’s governance and risk management practices.

What it means for customers and the industry

For consumers, the penalty highlights the importance of basic protections under spam laws. Commercial messages must clearly identify the sender and provide a simple, functional way to unsubscribe. When those safeguards fail, customers can be left exposed to persistent and unwanted marketing.

The case also reflects a broader tightening of regulatory oversight across the financial services sector. Authorities are increasingly focused on how companies communicate with customers, especially when promoting credit products that can affect personal finances.

For Latitude, the financial cost of the fine may be manageable, but the reputational impact could be longer lasting. Repeated breaches risk undermining trust at a time when customers are already more sensitive to how their data and communication preferences are handled.

Regulators have signalled that enforcement will remain strict, particularly for companies that fail to learn from past actions. More information about compliance requirements and consumer protections can be found through the Australian Communications and Media Authority.

As scrutiny intensifies, the expectation is clear: financial firms must not only offer products responsibly, but also communicate with customers in a way that respects both legal standards and consumer choice.

You may like this report on Moana Pasifika’s Super Rugby 2026 exit and financial crisis, which explains the challenges behind the club’s uncertain future.

Add Swikblog as a preferred source on Google

Make Swikblog your go-to source on Google for reliable updates, smart insights, and daily trends.