The Dubai Financial Services Authority (DFSA) has penalized Moody’s Investors Service Middle East Limited (Mismel) with a fine of $585,825 for failing to protect sensitive client information. Between late 2023 and mid-2026, the credit rating agency reported seven separate instances where confidential data was inadvertently exposed, including four cases where private information reached unauthorized external parties. By opting for an early settlement, the firm secured a reduction from the original penalty of $836,892.

Regulators pointed to significant operational lapses, such as the discontinuation of critical security software without a proper alternative and a general lack of internal controls to detect or prevent such leaks. Alan Linning, the DFSA’s managing director of enforcement, emphasized that credit rating agencies hold a position of high trust, and mishandling sensitive market data threatens the overall integrity of the financial sector. Moving forward, the DFSA reiterated its commitment to strict oversight, underscoring that firms operating within the Dubai International Financial Centre must foster a culture of data security to maintain investor confidence.