Volvo North America disclosed a data breach following a ransomware attack on IT provider Miljödata

Volvo North America disclosed a data breach that followed a ransomware attack on IT provider Miljödata. The incident occurred in August and impacted at least 25 companies, with Miljödata claiming the attack and data published on a Tor leak site by the ransomware group DataCarry. Volvo Group North America told the Massachusetts AG that the breach exposed employees’ names and Social Security numbers, though Volvo said its own systems were not compromised.

The data breach notification letter states that the incident occurred on 20 August 2025, Miljödata learned about the ransomware on 23 August 2025, and that affected individuals’ data may have been impacted on 2 September 2025; Miljödata notified Volvo Group on 2 September 2025.

According to Have I Been Pwned, the leaked data belongs to 870,000 accounts, including emails, names, addresses, phone numbers, government IDs, dates of birth and gender, and Volvo has offered 18 months of free identity protection services through Allstate.