A significant cyberattack has targeted the system provider Miljödata, affecting 80% of Sweden's municipalities. Sensitive personal data may have been compromised, with the attack linked to a ransom demand of 1.5 bitcoin. The Swedish government is taking the incident seriously, with ongoing investigations by authorities.
Massive Cyberattack Hits Swedish Municipalities: Sensitive Data at Risk
Massive Cyberattack Hits Swedish Municipalities
A significant cyberattack has targeted the system provider Miljödata. 80% of Sweden's municipalities use this provider, and there are fears that sensitive personal data may have been leaked.
– This is very serious, says Daniel Ahlqvist, IT Manager in Luleå Municipality to TV4 News.
The attack occurred over the weekend, affecting authorities and municipalities nationwide, according to TV4 News. Eight out of ten Swedish municipalities rely on Miljödata as their IT provider.
Miljödata's systems are used by managers and HR, covering areas such as rehabilitation cases, reporting, and handling of work-related injuries.
As a result of the attack, sensitive information about individuals, including municipal employees and students, may have been exposed to unauthorized parties.
– It is very serious for us; unfortunately, society is as it is with these cyberattacks. It is never good when it happens, says Daniel Ahlqvist, IT Manager in Luleå Municipality to TV4 News.
Extortionists Behind the Attack
According to the police in Blekinge, the attack is an extortion attempt. Investigator Helena Ranberg states that those behind the incident demanded 1.5 bitcoin, equivalent to approximately 1.5 million Swedish kronor.
Over 70 municipalities, regions, and companies have reported the matter to the Privacy Authority, IMY, which will investigate what happened, according to TV4 News.
Cybersecurity expert Marcus Murray, involved in the investigation, tells TV4 that they know who is behind the attack.
– When you carry out a ransomware attack, it is often the case that you reveal who you are, as you are also the one seeking payment for your extortion, says Marcus Murray.
According to him, a group has also claimed responsibility for the cyberattack.
Government: Taking It Very Seriously
On Tuesday, Civil Minister Carl-Oskar Bohlin commented on the attack. He says the government takes the matter "very seriously" and "understands the concern and uncertainty that cyberattacks can cause."
"The government receives ongoing information about the incident and is in close contact with the relevant authorities," he writes in a statement on X.