Data breach at major Swedish software supplier impacts 1.5 million

A data breach at Swedish software supplier Miljödata has exposed personal information of 1.5 million individuals, prompting an investigation by the Swedish Authority for Privacy Protection (IMY). Miljödata, which serves 80% of Sweden's municipalities, disclosed the cyberattack on August 25, revealing that attackers stole data and demanded 1.5 Bitcoin to avoid leaking it.

Operational disruptions affected several regions, prompting immediate inquiries from local police and cybersecurity teams. IMY reported that the data was uploaded to the dark web, raising concerns about potential GDPR violations.

IMY's head, Jenny Bård, noted, "The leak meant that a large portion of Sweden's population had their personal data published on the Darknet." Investigations will focus on Miljödata's security measures and municipalities' data handling practices.