A ransomware attack on the Swedish IT provider Miljödata has hit more than 200 municipalities. Because the company serves around 80 percent of all Swedish municipalities, up to 1.5 million people could be affected.
Sensitive health data stolen
The attackers seized large amounts of personal data – including names, medical certificates, rehabilitation plans and records of occupational injuries. Affected are systems that municipalities use for sick-leave reporting and reintegrating employees. Miljödata CEO Erik Hallén confirmed the attack on 25 August; the attackers are demanding 1.5 bitcoin (around $163,000) in ransom. No group has claimed responsibility so far.
Authorities investigate
The Swedish Privacy Agency has already received around 70 incident reports and launched a full investigation. The case shows once again how dependent public administration is on individual IT suppliers – when one central provider goes down, hundreds of agencies are hit at once.
Sources: BleepingComputer, The Record.
