<![CDATA[Sweden fines Miljödata $183,000 over breach affecting 2.2 million]]>Sweden's data protection authority, IMY, has fined IT systems provider Miljödata approximately $183,000 (SEK 1.8 million) following a breach that exposed the personal data of 2.2 million people. The regulator found that the company's security measures were inadequate, leading to the incident in August 2025.

The penalty highlights the growing scrutiny on third-party IT providers that handle sensitive data on behalf of municipalities and other organizations, where a single compromise can cascade across many downstream victims.

Key details:

  • Regulator: IMY (Sweden's data privacy authority)
  • Company fined: Miljödata
  • Fine amount: $183,000 / SEK 1.8 million
  • People affected: 2.2 million
  • Breach timeframe: August 2025
  • Reason cited: inadequate security measures

Since the article does not specify a CVE ID or advisory number, none is listed here. Organizations relying on Miljödata or similar third-party providers should review their vendor risk assessments and confirm what security obligations are contractually enforced.

Source: Unknown

Does your organization depend on third-party IT providers for sensitive data, and how are you verifying their security posture?

]]>https://xploitlk.com/topic/431/sweden-fines-miljödata-183-000-over-breach-affecting-2.2-millionRSS for NodeTue, 27 Oct 2026 08:18:35 GMTWed, 23 Sep 2026 00:30:24 GMT60