A cybercat on Miljodata, an IT system supplier for approximately 80% of the municipal systems of Sweden, has caused access problems in more than 200 areas of the country.
Apart from service disruption, there are concerns that the attackers also stole sensitive data. local media Report The actor threatened to raise a ransom of 1.5 (currently $ 168,000) from Milzodata in exchange for not leaking the theft information.
Milzoda is a Swedish software company that develops and provides the work environment and human resource management system for municipalities, regions and organizations.
Its system is used by most municipalities in Sweden to handle medical certificates, rehabilitation cases, professional injuries, incidents and work environmental reporting, and systematic work environmental management (SAM).
This attack occurred in the weekend with Milzodata CEO Eric Hollen Confirm this More than 200 municipalities have been affected in Sweden on 25 August.
“We are working very deeply with external experts, to check what has happened, what and who has been affected, and to restore the system’s functionality,” Hollen said.
Was able to find announcements about the incident in the field of bleepingcomputer Holland regionAnd too Gotland regionWarning its citizens that “sensitive personal data may be leaked.”
Other municipality Influenced influenced There are skellefteå, kalmar, karlstad and mönsterås by Swedish media.
Civil Defense Swedish Minister, Carl-Oskkar Bohlin said on X that the incident is being evaluated to estimate its impact with the help of certificate-by, and the police started an investigation.
“The scope of the incident is not yet clear, and is very quick to determine the actual results,” The minister said,
At the time of writing, no ransomware groups have publicly claimed responsibility for an attack in Milzodata.
The company’s website is currently offline and tries to contact them that email servers are below.
In January 2024, Swedish IT services and cloud hosting provider TietoV were killed by an Akira Rainmware attack, which affected operations in a wide range of businesses and caused service outage on government organizations and universities.