Sweden fines Miljödata $183,000 over breach affecting 2.2 million

Sweden's IMY fined HR software provider Miljödata SEK 1.8 million ($183,000) for inadequate security that led to an August 2025 breach affecting 2.2 million people. The regulator said the company failed to check new software and lacked real-time intrusion monitoring, violating Article 32(1) of GDPR.

• IMY imposed a SEK 1.8 million ($183,000) fine
• August 2025 attack affected 2.2 million people and 200 regions
• Attackers demanded 1.5 Bitcoin ($168,000) and leaked the data
• IMY is also investigating two municipalities and one region