Volvo Group Employee Data Stolen in Ransomware Attack
Briefly

Volvo Group Employee Data Stolen in Ransomware Attack
"A Swedish IT company, Miljödata fell victim to a ransomware attack in August. During the attack, the hackers stole personal information from Adato, a support system for rehabilitation, and Novi, a support system for HR personnel notes. The incident impacted approximately 25 private companies, including large companies such as Scandinavian airline SAS and metals company Boliden, and roughly 200 Swedish municipalities, including the country's capital Stockholm."
"On September 16, the leaked information was added to the data breach notification site Have I Been Pwned, which revealed that it included 870,000 unique email addresses, along with names, addresses, phone numbers, government IDs, dates of birth, and gender. In some cases, employment information, employee ID, sick leave information, and other information was also compromised, some of the affected entities have revealed."
Swedish IT company Miljödata suffered a ransomware attack in August that led to theft of personal information from Adato and Novi support systems. About 25 private companies, including Scandinavian airline SAS and metals company Boliden, and roughly 200 Swedish municipalities including Stockholm were impacted. Multiple universities, including University of Borås, Linköping University, Lund University, Örebro University and the Swedish University of Agricultural Sciences reported exposure. The DataCarry ransomware group claimed responsibility and posted stolen data to a Tor-based leak site in mid-September. Have I Been Pwned listed the leaked data showing 870,000 unique emails plus names, addresses, phone numbers, government IDs, dates of birth, and gender. Some records included employment details, employee IDs and sick leave information. Volvo Group North America notified current and former employees that names and Social Security numbers were affected and is providing 18 months of identity protection and credit monitoring; the number of impacted individuals was not disclosed.
#ransomware #data-breach #supply-chain-compromise #personal-data-exposure
Read at SecurityWeek
Unable to calculate read time
[
|
]