Volvo Group Employee Data Stolen in Ransomware Attack

Volvo Group North America has informed current and former employees of a data breach linked to the third-party supplier Miljödata, which was hit by a ransomware attack in August. The DataCarry ransomware group claimed the incident, adding Miljödata to its Tor-based leak site on 13 September and publishing allegedly stolen data the following day.

Have I Been Pwned later disclosed that the breach included 870,000 unique email addresses, along with names, addresses, phone numbers, government IDs, dates of birth and gender, with some cases affecting employment information and Social Security numbers for Volvo Group employees. The breach affected about 25 private companies and roughly 200 Swedish municipalities, including Stockholm, and was connected to education institutions such as several universities.

Volvo Group North America says it is offering 18 months of free identity protection and credit monitoring to affected individuals, and SecurityWeek notes the company has not disclosed the total number of impacted employees; the Massachusetts Attorney General’s Office has a copy of Volvo’s notification letters. According to Have I Been Pwned.