CERT24Swedish regulator fines Miljödata for insufficient protection of personal data – 22 September 2026Loading data…
CERT24Threat Observatory
Period

Swedish regulator fines Miljödata for insufficient protection of personal data – 22 September 2026

Swedish data protection authority IMY imposed a SEK 1.8 million administrative fine on systems provider Miljödata for violating Article 32(1) of the General Data Protection Regulation. In a cyber intrusion in August 2025, a threat actor obtained a large amount of personal data and subsequently published data on the darknet. According to the company, 2.2 million people were affected.

← Back to intelligence

Swedish regulator fines Miljödata for insufficient protection of personal data – 22 September 2026

Swedish data protection authority IMY imposed a SEK 1.8 million administrative fine on systems provider Miljödata for violating Article 32(1) of the General Data Protection Regulation. In a cyber intrusion in August 2025, a threat actor obtained a large amount of personal data and subsequently published data on the darknet. According to the company, 2.2 million people were affected.