THE US subsidiary of Ericsson disclosed a data breach affecting the personal information of thousands of individuals, with the incident blamed on a third-party service provider. The service provider detected unauthorized access to data on its systems in April 2025, and an investigation determined that files storing personal information may have been accessed between 17 and 22 April 2025.
The probe was only completed in February 2026, and Ericsson says the notice with the Maine Attorney General’s Office states the breach impacts roughly 15,000 individuals. Ericsson added that the service provider has represented there is no evidence of misuse of any potentially impacted information since the time of the incident, a disclaimer commonly issued in such cases.
The company noted it shares both employee and customer data with third-party providers but has not specified which category is affected by this incident. According to the Maine Attorney General’s Office, the breach affected about 15,000 individuals.