Lime Technologies’ Sportadmin Fined 6 Million Kronor Over Massive Data Breach Sweden-based IT company Lime Technologies AB, a provider of CRM and SaaS solutions including Sportadmin a club management service has been fined 6 million kronor (approx. €530,000) by the Swedish Authority for Privacy Protection (IMY) for inadequate IT security following a January 2025 data breach. The incident exposed personal information of over 2.1 million individuals, including children and young people, with leaked data encompassing personal identity numbers, club affiliations, and in some cases, sensitive protected information. The IMY ruled that Sportadmin violated Article 32 of the GDPR, which mandates sufficient technical and organizational safeguards to protect personal data. The breach highlighted systemic failures in the company’s security measures, prompting regulatory action. Lime Technologies, which operates across the Nordic region with offices in Sweden, Norway, Denmark, and Finland, develops cloud-based CRM systems such as Lime Go and Lime CRM. The fine arrives amid leadership changes, including the appointment of Tommas Davoust as CEO, effective January 1, 2026, succeeding Nils Olsson. The company also recently acquired a portal solution from E.ON in Germany, signaling expansion efforts. The incident underscores growing regulatory scrutiny over data protection in the SaaS sector, particularly for platforms handling sensitive user information.