Sweden fines Miljödata $183,000 over breach affecting 2.2 million
-
Sweden's data protection authority, IMY, has fined IT systems provider Miljödata approximately $183,000 (SEK 1.8 million) following a breach that exposed the personal data of 2.2 million people. The regulator found that the company's security measures were inadequate, leading to the incident in August 2025.
The penalty highlights the growing scrutiny on third-party IT providers that handle sensitive data on behalf of municipalities and other organizations, where a single compromise can cascade across many downstream victims.
Key details:
- Regulator: IMY (Sweden's data privacy authority)
- Company fined: Miljödata
- Fine amount: $183,000 / SEK 1.8 million
- People affected: 2.2 million
- Breach timeframe: August 2025
- Reason cited: inadequate security measures
Since the article does not specify a CVE ID or advisory number, none is listed here. Organizations relying on Miljödata or similar third-party providers should review their vendor risk assessments and confirm what security obligations are contractually enforced.
Source: Unknown
Does your organization depend on third-party IT providers for sensitive data, and how are you verifying their security posture?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login