Article Details
The expert: A million Swedes' personal data published on Darknet
Published on September 14, 2025
The stolen information included, among other things, social security numbers, telephone numbers, address and employment ID.
It was at the end of August that environmental data, the system supplier that delivers HR systems to 80 percent of Sweden's municipalities, was subjected to a data breach.
Was affected by the data leak: "It's very scary"
Both current and former employees in the City of Stockholm, Region Skåne, Linköping Municipality and the City of Gothenburg, among others, were hit by the leak.
Risk of fraud attempts
On Saturday, the Hackergruppen, which calls itself DataCarry, took on the cyberattack and threatened to publish data on Sunday.
Which they then did.
People who are or have been employed by the affected municipalities and the regions are now encouraged to pay extra attention to contact attempts from unknown senders.
-The big risk is that the attacker is now starting to contact private individuals through the leaked information and tries to trick them into giving more information, and then accessing other systems, says Karl Emil Nikka, IT security specialist at the theft protection association.
Required 1.5 bitcoins
According to Karl Emil Nikka, the group behind the attack, DataCarry, is relatively new to the gem.
- We know that they extorted a Danish healthcare company last year, but they only have a dozen victims on their "leaksite".
He describes the group and other hacker groups' approaches, where they first steal data and then extortion their victims to pay a sum of money so that the information is not published.
According to previous information, DataCarry demanded 1.5 Bitcoins, which in mid -September was worth just over SEK 1,600,000, so as not to publish the personal data.
Karl Emil Nikka believes that at the same time it is very unlikely that affected companies would choose to pay the requested sum.
- Regardless of what criminal actors promise, they are still criminals, so once information has leaked, you have to see them as leaked, he says.
The cyberattack is investigated by police and the security company Truesec.SVT has been able to see screenshots of the leak and have been able to confirm the identity of several people.
SVT News has sought environmental data.
Are you affected?Contact us at [email protected].