Swedish IT Company Data Breach Exposes Personal Details of 1.5 Million Users

According to DataBreaches[.]Net, Swedish authorities have launched formal investigations into a data breach affecting Miljödata, an IT company whose security lapse exposed the personal information of over 1.5 million individuals. The August attack, detected on 23 August 2025, led to sensitive data being published on the darknet and affected multiple Swedish municipalities and regional entities that relied on Miljödata’s services.

The Swedish Prosecution Authority confirmed that attackers successfully extracted and published data belonging to more than 1.5 million private citizens, with investigations continuing to understand the full scope and implications for Swedish data protection standards. The timeline notes events from 23–24 August 2025 through September 16, 2025, including a public disclosure, client system restarts, a threat post on darknet, and the eventual publication of the data.

Probes have involved ongoing communication between IMY, Miljödata, and affected organisations as authorities assess the scale of the leak and related risk of fraud.