Update about cyberattack on system provider
2025-09-01Miljödata’s investigation of the consequences following the cyberattack continues. The investigation shows that the hackers have been able to access parts of Miljödata’s data, but so far, there is no evidence that data has been stolen.
Miljödata announced that they will restart the systems and open them to customers again on Friday 29 August. However, Karlstad University has asked Miljödata to hold off connecting the university to the system Adato.
– We want to wait until the investigation of the cyberattack is complete, so that we can make a full assessment of the incident and feel assured before asking them to restart the system for us, says Head of HR, Ingrid Ganrot.
The university is also continuing its internal efforts to manage the consequences. A crisis management team was appointed on Monday under the leadership of the university’s chief security officer. The team includes representatives from several functions to manage the personal data incident, including those focused on data protection and information security.
– We’re receiving regular updates from Miljödata and have daily meetings to determine next steps, says Chief Security Officer, Berith Rannberg.
The university has filed a report with the Swedish Authority for Privacy Protection (IMY) and reported the incident to the Swedish Civil Contingencies Agency (MSB).
The cyberattack against Miljödata took place over the weekend 23–24 August and Karlstad University was notified about the incident on Monday 25 August. A total of five different systems were affected by the attack, which are used by municipalities, regions and higher education institutions. Karlstad University uses one of these systems, Adato, for documenting long-term sick leave and rehabilitation.
Read previous article about the cyberattack:

