Skip to Primary Navigation

Sportadmin gets SKr 6m fine for lacking IT security

Football tournament for children with spectators.
Photo: Getty Images

Personal data of a large part of Sweden’s population was leaked on the darknet following an attack on the company in January 2025.

Sportadmin has been fined SKr 6m ($670,786) by IMY (the Swedish Data Protection Authority) following an IT attack in January 2025 that led to a large amount of personal data being leaked.

In the attack, the hacker obtained information about more than 2.1 million people – which was subsequently published on the darknet.

The

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience