Breaches and incidents
Svedala kommun: intrusion takes down municipal IT, restored from hour-old backup
The municipality says “Den 1 oktober drabbades vi av ett intrang som orsakade omfattande stoerningar i var IT-miljo” (on 1 Oct an intrusion caused...
- Disclosed
- Verification
- Checked against a primary source
What happened
- The municipality says “Den 1 oktober drabbades vi av ett intrang som orsakade omfattande stoerningar i var IT-miljo” (on 1 Oct an intrusion caused extensive disruption in our IT environment); HurBra reported the same day that all digital systems were shut down, the municipality suspected ransomware and care services moved to reserve routines. Municipal director Johan Lundgren wrote on 28 Oct that the municipality was “bestulna” (robbed).
- Root cause: not disclosed.
- No attacker named; HurBra reported no known ransom demand.
- Restoration began from “en backup som bara var nagon timme gammal” (a backup only about an hour old) and about a week later practically everything was intact; e-services work again and an external review of the crisis work is planned. Whether personal data was taken is not stated on the municipality’s pages.