The data protection authority in Italy penalized UniCredit, the country's second-biggest bank, €2.8 million (£2.3 million) in relation to a 2018 data breach case.