GoKawiilSweden fines Miljödata $183,000 over 2025 breach exposing 2.2 million people
Sweden's data protection authority IMY has fined IT provider Miljödata SEK 1.8 million ($183,000) following a GDPR investigation into an August 2025 ransomware attack. The breach hit systems used by 80% of Swedish municipalities, exposing personal ID numbers, health data, and records involving minors after attackers published stolen data on the dark web under the name 'Datacarry'.
GoKawiil's interpretation of the reporting above, not reported fact.
IMY found Miljödata failed to properly vet new software installations and lacked real-time monitoring to catch intrusions, a shortfall regulators say violated GDPR's security requirements. The case illustrates how vendors serving critical public infrastructure can face regulatory penalties even after already suffering costly extortion attempts, potentially reshaping how such providers prioritize security investment.
- IMY fined Miljödata $183,000 for GDPR security failures tied to a 2025 breach
- The breach affected 2.2 million people and disrupted services across 200+ Swedish regions
- Regulators cited missing software vetting and lack of real-time intrusion monitoring as key failures
YubiKey 5 NFC security key — This breach highlights how weak authentication and access controls can expose sensitive personal data on a massive scale. A hardware security key like the YubiKey 5 NFC adds strong multi-factor authentication to accounts and admin systems, making it much harder for attackers to gain unauthorized access even if credentials are stolen.
See YubiKey 5 NFC security key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-09-22
Published there as: “Sweden fines Miljödata $183,000 over breach affecting 2.2 million”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.