The Danish Financial Supervisory Authority has issued a series of orders to payment processor Nets over significant shortcomings in IT risk management, contingency planning, and third-party risk controls, saying the deficiencies entail an elevated level of IT risk.
The regulatory action follows two major outages. A technical fault on July 19, 2025 disrupted services for roughly three hours, and a second outage on May 21, 2026 lasted several hours and rejected the majority of card payments. Retailers including Salling Group and Coop, along with pharmacies, activated emergency procedures to process offline transactions during the May incident. The regulator found that Nets does not conduct sufficient testing of its contingency plans.
Nets acknowledged the criticism and said it has been working on improvements following both incidents.