Volvo Group Reports Data Breach Following Ransomware Attack on HR Vendor

Volvo Group has disclosed a data breach tied to a ransomware attack on its HR software provider Miljödata. On 20 August 2025 Miljödata suffered the attack, which encrypted systems and disrupted operations, with the incident only detected on 23 August and a fuller assessment confirming on 2 September that employee data may have been compromised. Importantly, Volvo Group’s own IT infrastructure was not breached, with the incident confined to the vendor’s environment.

The exposed data may include basic identifiers such as first and last names and Social Security numbers, while payroll, bank account details and insurance information do not appear to have been accessed. Miljödata has engaged external cybersecurity experts to conduct a forensic investigation, and Volvo Group is reviewing vendor management and data-protection policies to prevent future events, according to Miljödata.

To support affected employees, Volvo Group is providing an 18-month subscription to Allstate Identity Protection Pro+ service, with enrolment instructions to be sent to impacted colleagues.