Swedish Authorities Drop Investigation into 2025 Miljödata Cyberattack After Insufficient Evidence

Swedish prosecutors have decided to discontinue the preliminary investigation into the 2025 cyberattack on Miljödata, a leading system provider serving 80% of Sweden's municipalities and numerous organizations, following a major data breach. The cyberattack, which occurred on August 23, 2025, exposed sensitive personal information of over 1.5 million individuals. The compromised data included personal identification numbers, phone numbers, addresses, email addresses, employment IDs, and job titles. On September 14, 2025, this data was published on the darknet.

The investigation, led by Sandra Helgadottir of the Swedish Prosecution Authority, classified the incident as a serious data intrusion and an attempted extortion. Despite extensive efforts and international collaboration to identify the culprits, prosecutors found the evidence collected insufficient to proceed further. However, authorities have left the door open to reopen the investigation should new evidence or leads emerge.

Miljödata plays a critical role for municipalities, regions, authorities, and private organizations in managing labor law issues, workplace rehabilitation, and injury cases, making the breach particularly impactful. The closure of the investigation marks a significant moment for Sweden's data security landscape but also underscores challenges in combating sophisticated cybercrimes.