Major Data Breach Exposes Swedish Government IT Systems and Digital Identity Infrastructure

A significant cyberattack has resulted in the leak of critical source code and sensitive personal data from Swedish government IT systems, raising concerns about the security of the country's digital infrastructure.

The hacker group ByteToBreach has publicly released the complete source code of Sweden's e-governance platform, which includes systems used for digital identity management and Bank-ID logins across multiple agencies including the Swedish Tax Agency. Alongside the source code, databases containing personal information, email passwords, electronic signing documents, and configuration data for digital identity and e-signature portals were compromised. The group exploited vulnerabilities within CGI Sweden’s digital infrastructure, which manages key digital services for Swedish authorities, according to reports.

The leaked materials also reportedly include access credentials and encryption keys necessary for operating closed government systems. The data breach has been discussed extensively on cybercriminal forums, highlighting the severity of the incident. ByteToBreach has made the source code freely available for download while offering the personal data and other sensitive information for sale, emphasizing the exposure of trust anchors and identity solutions foundational to Sweden's digital state.

Cert-SE, Sweden's authority for IT security incident management, acknowledged the incident but clarified that the affected systems were two internal test servers not connected to production environments. Gustaf Nilsson, spokesperson for Cert-SE, emphasized that there is no evidence of impact on production environments, operational services, or production data for customers.

This cybersecurity breach follows a pattern of attacks by the same hacker group, which recently leaked passenger data from Viking Line. Efforts to gain direct comment from the implicated IT company are ongoing.

The incident highlights critical vulnerabilities in governmental digital infrastructure and raises pressing questions about data protection and digital identity security for Swedish citizens and public authorities alike.