Swedish authorities confirmed on Tuesday that a recent cyberattack on an IT systems provider has led to the leak of sensitive personal data belonging to over 1.5 million individuals. The breach had involved the exposure of data on the darknet which has raised serious concerns about privacy and cybersecurity.
Swedish media reports indicate that the attack has affected a wide range of entities including town and city councils, private businesses and government organizations. This breach is huge as it impacts nearly 15% of Sweden’s total population of 10.6 million people.
The attack targeted Miljodata, an IT systems provider, over the weekend of August 23-24. According to the Swedish prosecution authority, this breach resulted in the theft and subsequent publication of personal information. Prosecutor Sandra Helgadottir confirmed that the stolen data, including names, addresses, and contact details, was leaked on the darknet.
Helgadottir stated that the group "Datacarry" has claimed responsibility for the attack. Investigations are currently underway to track down the individuals behind this significant cyber breach. At this point, there is no evidence to suggest the involvement of a foreign nation.
Reports from Swedish media say that the hackers demanded 1.5 Bitcoin (approximately $170,000) as a ransom threatening to release the stolen data unless their demands were met. As we can see the attackers followed through on their threat and the personal details were posted on the darknet for anyone to access.
The breach has affected multiple sectors, including local government bodies. The Swedish Authority for Privacy Protection revealed that by the end of August, they had received 250 complaints from affected individuals. At least 164 municipalities and four regional authorities were impacted by the hack.
Private companies were also among the victims. Major businesses such as Volvo, SAS, and GKN Aerospace reported that their data had been compromised in the attack. Notably employees in the city of Gothenburg were particularly affected with many reporting unauthorized access to their personal information.
