Miljödata
Disclosed Aug 25, 20251 year ago1,500,000 affectedConfirmed
Attack on Swedish municipal IT supplier Miljödata exposes 1.5M people
Miljödata, which supplies IT systems to about 80% of Sweden's municipalities, disclosed on August 25, 2025 that attackers stole data and demanded 1.5 Bitcoin; Sweden's privacy regulator IMY said data on 1.5 million people was exposed and opened investigations.
What is known
| People affected | 1,500,000 (as reported by the organization) |
|---|---|
| Disclosed | Aug 25, 2025 |
| Happened | Aug 25, 2025 |
| Attack | Extortion |
| Data exposed | Dates of birth, Emails, Government IDs, Names, Phone numbers, Addresses, Other |
| Sector | Tech · SE |
| Status | Confirmed |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Miljödatahaveibeenpwned.com · Aggregator | Aggregator |
| Data breach at major Swedish software supplier impacts 1.5 millionbleepingcomputer.com · News | News |
| IMY inleder granskningar utifran Miljodata-lackanimy.se · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Aug 25, 2025 | 1,500,000 |
| Have I Been Pwnedaccounts in the data | Sep 16, 2025 | 870,108 |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · source_url: https://haveibeenpwned.com/Breach/Miljodata to https://www.bleepingcomputer.com/news/security/data-breach-at-major-swedish-software-supplier-impacts-15-million/ · seed source
- 2026-09-25 · status: disclosed to confirmed · seed source
- 2026-09-25 · verified_by: empty to research · seed source
- 2026-09-25 · verified: 0 to 1 · seed source
- 2026-09-25 · country: empty to SE · seed source
- 2026-09-25 · attack: ransomware to extortion · seed source
- 2026-09-25 · data_types: ["dob","emails","government-id","names","phone","addresses"] to ["dob","emails","government-id","names","phone","addresses","other"] · seed source
- 2026-09-25 · records_basis: hibp to organization · seed source
- 2026-09-25 · records: 870108 to 1500000 · seed source
- 2026-09-25 · disclosed: 2025-09-16 to 2025-08-25 · seed source
- 2026-09-25 · summary: In August 2025, the Swedish system supplier Miljödata was the victim of a ransomware attack . Following the attack, data was subsequently published on the dark web and included 870k unique email addresses across various compromised files. D to Miljödata, which supplies IT systems to about 80% of Sweden's municipalities, disclosed on August 25, 2025 that attackers stole data and demanded 1.5 Bitcoin; Sweden's privacy regulator IMY said data on 1.5 million people was exposed and op · seed source
- 2026-09-25 · title: empty to Attack on Swedish municipal IT supplier Miljödata exposes 1.5M people · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned), confirmed by Research. Record counts are as reported. Not legal advice.