SWEDEN FINES MILJÖDATA $183K FOR BREACH

SECURITY DESK■ 1 MIN READ

WED, SEP 23, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Sweden's data privacy regulator IMY has fined IT systems provider Miljödata $183,000 for inadequate security measures that led to a data breach in August 2025. The incident exposed personal information of 2.2 million individuals.

The fine, equivalent to SEK 1.8 million, stems from Miljödata's failure to implement sufficient safeguards to protect user data. IMY determined that the company's security infrastructure did not meet requirements under Swedish and EU data protection regulations. The August 2025 breach represents a significant lapse for the IT systems provider, which serves government agencies and municipalities across Sweden. The regulator's enforcement action underscores ongoing pressure on organizations to maintain robust data security practices. Miljödata has not disclosed specific details about the breach's scope or the categories of personal data compromised. The company is expected to take corrective measures to address the regulatory findings. This penalty follows a pattern of substantial fines imposed by European privacy authorities on organizations failing to meet data protection standards.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P332COMMA'S HANDS-OFF DRIVING TECH UNDER INVESTIGATION

Comma's hands-off driving technology is being investigated following at least two fatal crashes. The inquiry involves instances where drivers were operating modified versions of Comma's software.

JUST NOW— Industry Desk

P317RYUK RANSOMWARE OPERATOR GETS 24 MONTHS

An Armenian national has been sentenced to two years in prison for participating in Ryuk ransomware attacks targeting U.S. companies. The defendant encrypted victims' systems as part of the notorious cybercriminal operation.

3H AGO— Security Desk

P312F5 PATCHES CRITICAL BIG-IP APM ZERO-DAY

F5 has released security updates to address a critical zero-day vulnerability in BIG-IP APM that attackers are actively exploiting to achieve remote code execution.

5H AGO— Security Desk

P308OBSCURA VPN ELIMINATES ABILITY TO LOG USER DATA

Obscura has launched a VPN service architected to make user activity logging technically impossible. The service uses a no-log-by-design approach rather than relying on policy promises alone.

7H AGO— Industry Desk

◄ BACK TO NEWS

SWEDEN FINES MILJÖDATA $183K FOR BREACH

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF