Skip to Primary Navigation

SKr1.8m fine for Miljödata after ransomware attack leads to data breach

People walking on Magnus Ladulasgatan at night in Stockholm, Sweden.
Photo: Getty Images

Information about more than two million people was hacked and leaked on darknet.

IMY, the Swedish Authority for Privacy Protection, has sanctioned the system provider Miljödata AB i Karlskrona SKr1.8m ($183,165) for inadequate security in connection with its big data breach following an attack in August 2025.

As we reported previously, 200 Swedish municipalities and regions were affected last year in the ransomware attack

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience