Volvo NA staff data stolen in third-party ransomware attack

"Miljödata immediately commenced an investigation to confirm the nature and scope of the incident and will continue to review their security policies, procedures, and tools as part of their ongoing commitment to information security. Miljödata has taken actions to implement enhanced security of the Miljödata hosted environment and, together with cybersecurity experts, has promptly launched an investigation into the attack."

"It told staff recently that their first and last names, along with their social security numbers, were hit when cybercriminals raided Swedish software slinger Miljödata in August. According to a disclosure [PDF] filed with the Massachusetts Attorney General's office, the attack on Miljödata occurred on August 20, and the company discovered it three days later. Volvo's data was confirmed to be affected on September 2."

A ransomware attack on Swedish HR software provider Miljödata impacted Volvo North America employee records, exposing first and last names and social security numbers. The attack occurred on August 20 and was discovered three days later; Volvo confirmed affected data on September 2. The DataCarry ransomware group claimed responsibility and published Miljödata files on a dark web site. Miljödata is investigating with cybersecurity experts, implementing enhanced security measures, and reviewing policies and tools. The breach affected many organizations and reportedly included about 870,000 unique email addresses among the stolen files.

Read at Theregister