Hackers Target Swedish Power Grid Operator

Hacker activity targeted Svenska kraftnät, Sweden’s state-owned power grid operator, with the incident described as a data breach that was discovered on a Saturday and involved an isolated external file transfer solution. According to Svenska kraftnät, the country’s electricity supply was not affected and no critical systems were impacted, with the organisation scrambling to understand the scope of the attack.

The Everest ransomware group has been connected to the breach, and it has been stated that the group stole roughly 280 gigabytes of data and threatened to leak it unless demands were met. The operator said it would share further details as the investigation progresses, but noted that information about the threat actor would not be disclosed during the ongoing probe. The breach was disclosed on 28 October 2025, with authorities alerted and the incident under investigation.

It remains unclear what type of data Everest exfiltrated, though the situation underscores the continuing risk to critical infrastructure from financially motivated cybercrime.