Swedish IT systems supplier hack affects 1.5M individuals

Information from 1.5 million people has been exposed following an August cyberattack against Swedish work and HR management IT systems supplier Miljdata, which caters to almost 80% of municipalities across Sweden, according to BleepingComputer.

Such extensive data exposure on the dark web, which was conducted by the Datacarry threat operation, is being investigated by the Swedish Authority for Privacy Protection, or IMY, for possible violations of the European Union's General Data Protection Regulation.

"The leak raises a number of questions about the level of security and what types of personal data were stored in the systems. Our main focus is to investigate any shortcomings that could provide lessons going forward, in order to reduce the risk of similar incidents happening again," said IMY Head Jenny Brd.

Have I Been Pwned has already included the 224 MB archive of data leaked by DataCarry, which was found to include personal information from 870,000 individuals.