Cyberattack on IT systems provider hits 200 municipalities in Sweden

Swedish company Miljödata, which provides software solutions to most of the country’s municipalities, has been hit by a massive cyberattack. The incident has left more than 200 regions without access to their systems, and the attackers are demanding a ransom in bitcoins for the stolen data.

Miljödata specializes in developing HR and workplace management systems that are used for medical records, work-related injuries, workplace incidents and administrative processes. It is estimated that around 80% of Swedish municipalities use these solutions.

The attack took place over the weekend, and on August 25, the company confirmed that the scale of the problem had affected more than 200 municipalities. Miljödata CEO Erik Gallen said the company was working intensively with external experts to restore systems and assess the impact of the attack. Local authorities, including in the regions of Halland and Gotland, have warned citizens about a possible leak of personal data. The municipalities of Skellefteå, Kalmar, Karlstad and Mönsterås are also among the affected.

Sweden’s Minister of Civil Defense, Karl-Oskar Bolin, said that CERT-SE and the police had already launched an investigation. At the same time, no known groups have so far claimed responsibility for the attack.

• The incident was the latest in a series of large-scale attacks on IT suppliers in Scandinavia. In January 2024, Tietoevry was hit by the Akira malware, which paralyzed the work of universities, government agencies and businesses in the region. Such attacks highlight the high risks for public services that rely on centralized IT solutions.

The cyberattack on Miljödata shows the vulnerability of municipal systems and the scale of the risks that arise from dependence on a single provider. While experts try to contain the incident, municipalities and users should prepare for the possible consequences of a personal data leak.