Miljödata Data Breach (2025)

On August 25, 2025, Swedish system supplier Miljödata suffered a ransomware attack that resulted in the exposure of personal information belonging to 870,000 individuals. The compromised data, which was later published on the dark web, includes names, email addresses, phone numbers, physical addresses, dates of birth, genders, and government-issued personal identity numbers.

What's Publicly Reported from Reporting

Public reporting indicates the breach occurred in August 2025 when ransomware operators gained access to Miljödata’s systems. The company supplies environmental data management solutions primarily to Swedish municipalities and organizations. After the initial compromise, attackers exfiltrated files containing records for approximately 870,000 unique email addresses along with associated personal details.

The exposed information spans multiple categories that together paint a detailed picture of each individual. Dates of birth, government-issued IDs, and physical addresses were included alongside contact information. Available reporting describes the data as having been published on dark web leak sites commonly used by ransomware groups, though the specific threat actor has not been publicly named in primary breach notifications.

Why This Matters for You and Your Family

When your name, address, date of birth, government ID number, phone, email, and gender are bundled together and released online, the risk extends far beyond simple spam. Identity thieves can use these details to attempt account takeovers, file fraudulent tax returns, apply for credit in your name, or impersonate you with government agencies. For families, a single breach can expose both parents and children if household records are linked.