How to protect yourself against digital fraud
2025-09-15The cyberattack on Miljödata has resulted in certain information about current and former employees at Karlstad University being leaked and, over the weekend, published on the darknet.
Following the incident with Miljödata’s IT system, all employees are urged to stay extra alert. A warning sign could be if you are contacted by a person or a company in an unusual or unexpected way. Particularly if it is someone you have never had contact with before. This applies regardless of whether the communication takes place via phone, text message, letter or email.
Remember to never share personal information such as passwords with anyone, or use BankID or Freja eID upon the request of someone else.
You can read more about how to protect yourself on the following pages:
- Åtgärder om du har berörts av en personuppgiftsincident | IMY
- Bedrägerier och dataintrång | Säkerhetskollen
- Säkra din e-legitimation | MSB
- Identitetsintrång, id-kapning | Polisen.se
- Protect yourself against scam calls | the Swedish Police
- Identity theft | The Swedish Consumer Agency
Miljödata provides the system Adato for documenting long-term sick leave and rehabilitation. The system includes all employees at Karlstad University from 2017 onwards.
Information that has leaked includes:
- Names
- Personal identity numbers
- Contact details (work email addresses, phone numbers and home addresses)
- Number of sick days, if 15 days or more (long-term sick leave)
Miljödata’s investigation does not show any signs that information containing details about, for example, medical certificates or information about the grounds for rehabilitation plans, has been leaked.
Karlstad University will not be using the system Adato until it is deemed safe and secure by the university.
If you are a current or former employee of Karlstad University and have questions regarding the situation, you are welcome to contact the HR Office at the university via email: hrsupport@kau.se
You are also welcome to contact the university’s data protection officer: dpo@kau.se
Read previous articles about the cyberattack:
- Cyberattack on system provider
- Update about cyberattack on system provider
- Certain information has leaked following the cyberattack

