Sweden fines Miljödata $183,000 over 2025 breach exposing 2.2 million people

Sweden's data protection authority IMY has fined IT provider Miljödata SEK 1.8 million ($183,000) following a GDPR investigation into an August 2025 ransomware attack. The breach hit systems used by 80% of Swedish municipalities, exposing personal ID numbers, health data, and records involving minors after attackers published stolen data on the dark web under the name 'Datacarry'.